CVE-2026-58289
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
HIGH 8.3EPSS 2.0%
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
- Affected
- Microsoft · Microsoft Edge (Chromium-based)
- CVSS v3.1 NVD
- 8.3 HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H - CVSS v3.1 MICROSOFT
- 9.0 CRITICAL
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H - EPSS
- 1.99% chance of exploitation in the next 30 days, 80th percentile
- Published
- 2026-07-03
- Updated
- 2026-10-08