Chromium: CVE-2026-12465 Insufficient validation of untrusted input in Metrics
Published June 19, 2026Updated June 19, 2026
Source data
Overview
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Impact & technical details
A separate impact classification is not supplied in this record. See the source advisory.
What is the version information for this release? Microsoft Edge Version Date Released Based on Chromium Version 149.0.4022.80 06/19/2026 149.0.7827.156
Why is this Chrome CVE included in the Security Update Guide? The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It is being documented in the Security Update Guide to announce that the latest version of Microsoft Edge (Chromium-based) is no longer vulnerable. How can I see the version of the browser? In your Microsoft Edge browser, click on the 3 dots (...) on the very right-hand side of the window Click on Help and Feedback Click on About Microsoft Edge
- CVSS base score
- Not supplied
Affected products
- Microsoft Edge (Chromium-based)
Source guidance
Remediation
- Release Notes
Patch availability is not confirmed by this dataset. Consult the vendor before selecting a remediation.
GTP recommendation · Rule-based guidance
Recommended next step
Review affected Microsoft products and apply the applicable security updates through your organization's normal patch-management process. Confirm availability and prerequisites in the Microsoft advisory.
Authoritative sources & updates
Findings and update information come from the linked publishers. GTP compiles the public record and provides the recommendation above. CVSS ratings shown here come from Microsoft. NVD references provide additional public context.
Managed by GTP?
Griffin Technology Partners managed customers may receive additional environment-specific security guidance and remediation assistance through their managed services relationship.
Security bulletins are provided for informational purposes and compiled from authoritative public sources. Vulnerability applicability varies by environment. Validate affected products, configuration, compatibility requirements, and vendor guidance before making production changes.