[ CVE-2026-85890 · Published 29 Oct 2026 ]

Vulnerability in Microsoft Edge (Chromium-based)

CVSS 8.8 EPSS <1%2 agency advisoriesFix available

[ Description ]Official description

Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

[ Fixes ]Fixes and patches

[ Advisories ]Government CERT advisories

  • BSI CERT-BundWID-SEC-2026-4040

    Microsoft Edge: Multiple vulnerabilities allow code execution Translated from German

    CVE-2026-96199CVE-2026-85897CVE-2026-85890+1 more CVEs
  • CERT-FRCERTFR-2026-AVI-1342

    Multiple vulnerabilities in Microsoft Edge Translated from French

    Multiple vulnerabilities have been discovered in Microsoft Edge. They allow an attacker to cause remote arbitrary code execution and a security problem not specified by the vendor.

    CVE-2026-106348CVE-2026-106208CVE-2026-106232+250 more CVEs

[ References ]References