CVE-2026-66798: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Other sources
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 152.0.4191.53 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 152.0.4191.52
Event History
Frequently Asked Questions
Does exploitation require an authenticated or privileged account?
No. The vector indicates no privileges are required, and the vulnerability is described as exploitable by an unauthorized attacker.
Is user interaction required for exploitation?
Yes. The CVSS vector indicates that user interaction is required.
What impact is reflected in the supplied severity assessment?
The supplied CVSS assessment rates the issue at 4.3 (medium), with low availability impact and no confidentiality or integrity impact reflected in the vector.