CVE-2026-57992

35th percentile — higher than 35% of all known CVEs

A Use-After-Free vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network. The issue stems from improper memory management when processing specially crafted network requests.

An attacker can remotely execute arbitrary code in the browser context, potentially leading to system compromise, data theft, or lateral movement within the organization's network.

Immediately update Microsoft Edge to the latest version available from the official repository. Implement a policy to block unknown or malicious websites until the update is applied.