CVE-2026-66798: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Published Aug 28, 2026
·Updated
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Other sources
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
— Microsoft
Affected Software
2 affected componentsFixes available
Microsoft Edge<152.0.4191.53
Microsoft Edge (Chromium-based)<152.0.4191.53
152.0.4191.53
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 152.0.4191.53
Event History
Aug 28, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·02:00 PM
DescriptionAffected Software
CVE Published
via MITRE·05:45 PM
Data Sourced
via MITRE·05:45 PM
DescriptionSeverity
Frequently Asked Questions
1
Does exploitation require an authenticated or privileged account?
No. The vector indicates no privileges are required, and the vulnerability is described as exploitable by an unauthorized attacker.
2
Is user interaction required for exploitation?
Yes. The CVSS vector indicates that user interaction is required.
3
What impact is reflected in the supplied severity assessment?
The supplied CVSS assessment rates the issue at 4.3 (medium), with low availability impact and no confidentiality or integrity impact reflected in the vector.