CVE-2026-85890: Double Free

Q: What does an attacker need to exploit this vulnerability?

The attacker can target the vulnerable Microsoft Edge (Chromium-based) remotely without privileges or complex attack conditions, but exploitation requires user interaction.

Q: What is the potential impact if exploitation succeeds?

Successful exploitation can allow unauthorized remote code execution and may affect confidentiality, integrity, and availability.

Q: How urgent is remediation?

This issue is rated high severity with a CVSS score of 8.8. The provided data does not identify affected versions or available mitigations, so use the Microsoft advisory reference to determine applicable updates.

Published Oct 16, 2026

Updated

Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Other sources

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

— Microsoft

Affected Software

1 affected componentFixes available

Microsoft Edge (Chromium-based)<154.0.4258.37

154.0.4258.37

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 154.0.4258.37

Event History

Oct 16, 2026

CVE Published

via Microsoft·02:00 PM

Data Sourced

via Microsoft·02:00 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What does an attacker need to exploit this vulnerability?

The attacker can target the vulnerable Microsoft Edge (Chromium-based) remotely without privileges or complex attack conditions, but exploitation requires user interaction.

What is the potential impact if exploitation succeeds?

Successful exploitation can allow unauthorized remote code execution and may affect confidentiality, integrity, and availability.

How urgent is remediation?

This issue is rated high severity with a CVSS score of 8.8. The provided data does not identify affected versions or available mitigations, so use the Microsoft advisory reference to determine applicable updates.

CVE-2026-85890: Double Free

Other sources

Affected Software

Remediation

Event History

Frequently Asked Questions

What does an attacker need to exploit this vulnerability?

What is the potential impact if exploitation succeeds?

How urgent is remediation?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this vulnerability?

What is the potential impact if exploitation succeeds?

How urgent is remediation?