CVE-2026-57981
HighCVSS 8.8Exploitation Probability (EPSS)
Low risk43th percentile — higher than 43% of all known CVEs
Summary
A Use-After-Free vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. The issue stems from improper memory management when processing specific network data.
Risk Assessment
An attacker can remotely execute arbitrary code in the browser context, potentially leading to system compromise, data theft, or lateral movement within the organization's network.
Recommendation
Immediately update Microsoft Edge to the latest version available through the official update channel. Enforce a policy blocking unknown or untrusted websites until the patch is applied.
Original NVD description (English source)
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

