Read the docs
TI-2026-49158 Aliases CVE-2026-70341GHSA-f6v3-2mxj-x777

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Priority MEDIUM 41CWE-416Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from Microsoft.

Summary

Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00637 50th percentileScored 2026-11-07
Fix Fixed Microsoft Edge (Chromium-based) (Microsoft): 152.0.4191.52Microsoft Edge for Android (Microsoft): 152.0.4191.52+4 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
MicrosoftMicrosoft Edge (Chromium-based)1.0.0.0 to before 152.0.4191.52152.0.4191.52Patch availableCNA
MicrosoftMicrosoft Edge for Android1.0.0.0 to before 152.0.4191.52152.0.4191.52Patch availableCNA
MicrosoftMicrosoft Edge for iOS1.0.0.0 to before 152.0.4191.52152.0.4191.52Patch availableCNA
MicrosoftMicrosoft Edge for Linux1.0.0 to before 152.0.4191.52152.0.4191.52Patch availableCNA
MicrosoftMicrosoft Edge for MAC1.0.0.0 to before 152.0.4191.52152.0.4191.52Patch availableCNA
MicrosoftMicrosoft Edge for Windows1.0.0.0 to before 152.0.4191.52152.0.4191.52Patch availableCNA
  • Microsoft Edge (Chromium-based) VendorMicrosoft Affected 1.0.0.0 to before 152.0.4191.52 Fixed in 152.0.4191.52 Patch available CNA
  • Microsoft Edge for Android VendorMicrosoft Affected 1.0.0.0 to before 152.0.4191.52 Fixed in 152.0.4191.52 Patch available CNA
  • Microsoft Edge for iOS VendorMicrosoft Affected 1.0.0.0 to before 152.0.4191.52 Fixed in 152.0.4191.52 Patch available CNA
  • Microsoft Edge for Linux VendorMicrosoft Affected 1.0.0 to before 152.0.4191.52 Fixed in 152.0.4191.52 Patch available CNA
  • Microsoft Edge for MAC VendorMicrosoft Affected 1.0.0.0 to before 152.0.4191.52 Fixed in 152.0.4191.52 Patch available CNA
  • Microsoft Edge for Windows VendorMicrosoft Affected 1.0.0.0 to before 152.0.4191.52 Fixed in 152.0.4191.52 Patch available CNA

CPE configurations NVD · 6

CPEVersionsRoleVendor
cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*not specified by NVDVulnerableMicrosoft
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*not specified by NVDRunning onApple
cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*not specified by NVDRunning onLinux
cpe:2.3:a:microsoft:edge:*:*:*:*:*:android:*:*before 152.0.4191.52VulnerableMicrosoft
cpe:2.3:a:microsoft:edge:*:*:*:*:*:iphone_os:*:*before 152.0.4191.52VulnerableMicrosoft
cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:-:*:*:*before 152.0.4191.52VulnerableMicrosoft
  • cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Microsoft
  • cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Apple
  • cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Linux
  • cpe:2.3:a:microsoft:edge:*:*:*:*:*:android:*:* Versions before 152.0.4191.52 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:edge:*:*:*:*:*:iphone_os:*:* Versions before 152.0.4191.52 Vulnerable ·Microsoft
  • cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:-:*:*:* Versions before 152.0.4191.52 Vulnerable ·Microsoft

Remediation

  • Fix · CNA Microsoft Edge (Chromium-based) (Microsoft) Fixed in 152.0.4191.52
  • Fix · CNA Microsoft Edge for Android (Microsoft) Fixed in 152.0.4191.52
  • Fix · CNA Microsoft Edge for iOS (Microsoft) Fixed in 152.0.4191.52
  • Fix · CNA Microsoft Edge for Linux (Microsoft) Fixed in 152.0.4191.52
  • Fix · CNA Microsoft Edge for MAC (Microsoft) Fixed in 152.0.4191.52
  • Fix · CNA Microsoft Edge for Windows (Microsoft) Fixed in 152.0.4191.52

Vendor assessments

Microsoft

Microsoft's page for this CVE →

Impact
Remote Code Execution
Exploited
No
Publicly disclosed
No
Exploitability
Exploitation Unlikely
ProductStatusPlan or fix
Microsoft Edge (Chromium-based)Fixed 152.0.4191.52 · Security Update
Microsoft Edge for AndroidFixed 152.0.4191.52 · Security Update
Microsoft Edge for LinuxFixed 152.0.4191.52 · Security Update
Microsoft Edge for MACFixed 152.0.4191.52 · Security Update
Microsoft Edge for iOSFixed 152.0.4191.52 · Security Update

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-70341
  2. 2026-10-03 Alias added: GHSA-f6v3-2mxj-x777
  3. 2026-10-06 EPSS moved to the 50th–90th percentile
  4. 2026-10-06 CVSS score added · NVD
  5. 2026-10-07 EPSS moved to the below the 50th percentile
  6. 2026-10-25 EPSS moved to the 50th–90th percentile
  7. 2026-10-28 Fix available: Microsoft/Microsoft Edge for [email protected] · CNA

References

Patch 1

  • TI-2024-07390 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2022-03781 Out-of-bounds write in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2015-00277 Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through… KEVCVSS 3.1CRITICAL 9.8
  • TI-2015-00275 Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and… KEVCVSS 3.1CRITICAL 9.8
  • TI-2023-04799 Out-of-bounds write in Google Chrome KEVCVSS 3.1HIGH 8.8
  • TI-2020-12621 Out-of-bounds write in Google Chrome KEVCVSS 3.1HIGH 8.8
See all 761 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences