CVE-2026-122518: Medium severity Microsoft Edge vulnerability

Q: What does an attacker need to exploit this issue?

The attack vector is network-based and requires user interaction. The attacker does not need privileges on the affected system.

Q: What is the expected security impact?

The vulnerability is rated as having high confidentiality impact, indicating potential disclosure of information. No integrity or availability impact is indicated by the supplied CVSS vector.

Published Nov 4, 2026

Updated

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Other sources

Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

— Microsoft

Affected Software

1 affected componentFixes available

Microsoft Edge<156.0.4314.42

156.0.4314.42

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 156.0.4314.42

Event History

Nov 4, 2026

CVE Published

via Microsoft·04:00 PM

Data Sourced

via Microsoft·04:00 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What does an attacker need to exploit this issue?

The attack vector is network-based and requires user interaction. The attacker does not need privileges on the affected system.

What is the expected security impact?

The vulnerability is rated as having high confidentiality impact, indicating potential disclosure of information. No integrity or availability impact is indicated by the supplied CVSS vector.

CVE-2026-122518: Medium severity Microsoft Edge vulnerability

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the expected security impact?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

What is the expected security impact?