CVE-2026-85898: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Q: What must an attacker do to exploit this vulnerability?

The attacker must deliver the exploit over a network and require user interaction. No attacker privileges are required.

Q: What is the potential impact if exploitation succeeds?

Successful exploitation can allow unauthorized code execution. The listed impact includes high confidentiality, integrity, and availability effects.

Q: Is a fix available?

Yes. A patch is available for the affected Microsoft Edge product entries.

Published Oct 16, 2026

Updated

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Other sources

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

— Microsoft

Affected Software

3 affected componentsFixes available

Microsoft Microsoft Edge (Chromium-based)

Microsoft Edge<154.0.4258.48

154.0.4258.48

Microsoft Edge Chromium<154.0.4258.48

Remediation

Patch Available

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85898

Event History

Oct 16, 2026

CVE Published

via Microsoft·02:00 PM

Data Sourced

via Microsoft·02:00 PM

DescriptionSeverityWeaknessAffected Software

Oct 27, 2026

CVE Published

via MITRE·08:37 PM

Data Sourced

via MITRE·08:37 PM

DescriptionSeverity

Data Sourced

via NVD·09:19 PM

RemedyDescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What must an attacker do to exploit this vulnerability?

The attacker must deliver the exploit over a network and require user interaction. No attacker privileges are required.

What is the potential impact if exploitation succeeds?

Successful exploitation can allow unauthorized code execution. The listed impact includes high confidentiality, integrity, and availability effects.

Is a fix available?

Yes. A patch is available for the affected Microsoft Edge product entries.

CVE-2026-85898: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Other sources

Affected Software

Remediation

Patch Available

Event History

Frequently Asked Questions

What must an attacker do to exploit this vulnerability?

What is the potential impact if exploitation succeeds?

Is a fix available?

Company

Resources

Contact

Frequently Asked Questions

What must an attacker do to exploit this vulnerability?

What is the potential impact if exploitation succeeds?

Is a fix available?