CVE Catalog
CVE-2026-58289
CriticalCVSS 9.0Exploitation Probability (EPSS)
Low risk0.53%
41th percentile - higher than 41% of all known CVEs
Summary
A type confusion vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network.
Risk Assessment
An attacker can exploit this flaw to gain control over the victim's system, leading to data theft, malware installation, or further network compromise within the organization.
Recommendation
Immediately update Microsoft Edge to the latest version provided by the vendor. Enforce policies to block unauthorized extensions and restrict access to untrusted websites.
Original NVD description (English source)
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

