CVE-2026-88090: Medium severity Microsoft Edge (Chromium-based) vulnerability
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
Other sources
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 154.0.4258.37Fixed in 154.0.4258.38
Event History
Frequently Asked Questions
What does an attacker need to exploit this vulnerability?
The attacker can attempt exploitation over a network and does not need prior privileges, but user interaction is required. The provided data does not specify the form of interaction or delivery mechanism.
What impact is indicated if exploitation succeeds?
Successful exploitation may allow elevation of privilege. The supplied severity vector indicates low confidentiality and integrity impact, with no availability impact.
Are default Microsoft Edge configurations affected?
The provided information identifies Microsoft Edge (Chromium-based) as affected but does not state whether the issue is reachable or exploitable in a default configuration.
How can I determine whether systems are affected or mitigated?
The provided data does not include affected or fixed Edge version numbers, update details, or detection indicators. Verify applicable remediation and version guidance through the referenced Microsoft security advisory.