CVE-2026-85899: Use After Free
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Other sources
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 155.0.4283.45
Event History
Frequently Asked Questions
What level of access does an attacker need before exploiting this issue?
The attacker must already be authorized and have low privileges. The vulnerability can then be exploited over the network without user interaction.
What is the likely impact if exploitation succeeds?
Successful exploitation can allow elevation of privilege. The provided scoring indicates high impact to integrity and availability, with no stated confidentiality impact.
Can this be exploited remotely without user interaction?
Yes. The attack vector is network-based, attack complexity is low, and user interaction is not required.