Recorded 6 Nov 2026 at 16:31 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position.
See the latest record.
The historical field “Public exploit code” recorded Nuclei detection-template membership. It did not establish exploit availability. The original recorded fields remain below.
CVEMicrosoft Security Response Center
Chromium CVE-2026-110916: Improper input validation in Desktop
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
What it said
CVE
CVE-2026-110916
Severity
Moderate
CVSS base score
Not published
CVSS vector
Not published
Impact
Not stated
Exploitation detected
Unknown: not stated by MSRC
Publicly disclosed
Unknown: not stated by MSRC
Exploitability
Not assessed
Component
Microsoft Edge (Chromium-based)
Weakness
Not stated
Issued by
Chrome
Customer action
Required: follow the MSRC remediation guidance
Affected products
Microsoft Edge (Chromium-based)
Updates that fix it
No KB listed
CISA KEV
Not listed in the collected catalog
EPSS
No EPSS score collected
Public detection template
Unknown: detection-template evidence is incomplete or retained
Complete at observationRead 6 Nov 2026 at 16:26 UTC
FIRST EPSS
IncompleteRead 6 Nov 2026 at 15:16 UTC
Public detection templates (Nuclei)
IncompleteRead 6 Nov 2026 at 15:16 UTC
Coverage describes the sources at this observation. A complete read then does not establish their current position.
What changed
Detection template: No Nuclei template listed → Unknown: detection-template evidence is incomplete or retained
Detection template: Unknown: detection-template evidence is incomplete or retained → No Nuclei template listed
Detection template: No Nuclei template listed → Unknown: detection-template evidence is incomplete or retained
Detection template: No Nuclei template listed · Customer action: Required: apply the update → Required: follow the MSRC remediation guidance · Public disclosure: No → Unknown: not stated by MSRC · Exploitation detected: Not reported by MSRC → Unknown: not stated by MSRC
Page history
Changes are dated when recorded; day views use the last saved version from that UTC day, and citations stay fixed.