Where
-Infinity
0
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

1 / 2
Source: Microsoft
First published (updated )
Severity
8.8
Buffer Overflow
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

1 / 2
Source: Microsoft
First published (updated )
Severity
6.1
XSS
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:U/RL:O/RC:C

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

1 / 2
Source: Microsoft
First published (updated )
Severity
7.8
Race Condition
AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium CVE-2026-87564: Type confusion in V8

1 / 3
Source: Microsoft
First published (updated )
Severity
8.8
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-87587: Use after free in V8

1 / 3
Source: Microsoft
First published (updated )
Severity
8.8
Use After Free
AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-87536: Use after free in V8

1 / 3
Source: Microsoft
First published (updated )
Severity
8.8
EPSS
0.13%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2026-5883 Use after free in Media

1 / 3
Source: Microsoft
First published (updated )
Severity
5.3
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Chromium: CVE-2026-17909 Insufficient validation of untrusted input in Isolated Web Apps

1 / 3
Source: Microsoft
First published (updated )
Severity
8.8
EPSS
0.08%
Input Validation, Use After Free, Race Condition, Double Free, SQL Injection
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A logic issue was addressed with improved checks.

1 / 89
Source: Apple
First published (updated )
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium CVE-2026-87491: Out of bounds write in V8

1 / 4
Source: Microsoft
First published (updated )
Severity
8.8
3 Months
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2026-85046 Type confusion in V8

1 / 4
Source: Microsoft
First published (updated )
Severity
8.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2025-13223 Type Confusion in V8

1 / 4
Source: Microsoft
First published (updated )
Severity
8.8
Integer Overflow, Input Validation, Use After Free, Race Condition, Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Accessibility. A privacy issue was addressed by removing sensitive data.

1 / 77
Source: Apple
First published (updated )
Severity
8.8
EPSS
0.53%
Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2026-2441 Use after free in CSS

1 / 4
Source: Microsoft
First published (updated )
Severity
3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-78953 Missing authorization in SiteIsolation

1 / 3
Source: Microsoft
First published (updated )
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Chromium CVE-2026-87544: Incorrect authorization in Extensions

1 / 3
Source: Microsoft
First published (updated )
Severity
8.8
EPSS
0.07%
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Chromium: CVE-2026-0899 Out of bounds memory access in V8

1 / 3
Source: Microsoft
First published (updated )
Severity
7.7
AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C

External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.

1 / 2
Source: Microsoft
First published (updated )
Severity
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Chromium: CVE-2026-79276 Improper privilege management in FileSystem

1 / 3
Source: Microsoft
First published (updated )
Severity
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-79264 Incorrect reference resolution in Preload

1 / 3
Source: Microsoft
First published (updated )
Severity
4.3
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Chromium: CVE-2026-79259 Improper input validation in Safebrowsing

1 / 3
Source: Microsoft
First published (updated )
Severity
4.3
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-79251 Improper input validation in Network

1 / 3
Source: Microsoft
First published (updated )
Severity
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-79248 Incorrect authorization in Input

1 / 3
Source: Microsoft
First published (updated )
Severity
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-79238 Incorrect authorization in ServiceWorker

1 / 3
Source: Microsoft
First published (updated )
Severity
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Chromium: CVE-2026-79211 Incorrect authorization in USB

1 / 3
Source: Microsoft
First published (updated )
Severity
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-79205 Incorrect authorization in Network

1 / 3
Source: Microsoft
First published (updated )
Severity
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-79201 Improper access control in Workers

1 / 3
Source: Microsoft
First published (updated )
Severity
4.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Chromium: CVE-2026-79199 Incorrect authorization in Network

1 / 3
Source: Microsoft
First published (updated )
Severity
4.3
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Chromium: CVE-2026-79192 Improper input validation in Variations

1 / 3
Source: Microsoft
First published (updated )

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203