CVE Catalog
CVE-2026-70339
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk0.24%
15th percentile - higher than 15% of all known CVEs
Summary
A type confusion vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Risk Assessment
Remote code execution could lead to full compromise of the user's browser, potentially resulting in data theft or malware installation.
Recommendation
It is recommended to immediately update Microsoft Edge to the latest version that includes a fix for this vulnerability. Also, inform users about the risks of opening unknown links.
Original NVD description (English source)
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.