[ CVE-2026-85899 · Published 29 Oct 2026 ]
Vulnerability in Microsoft Edge (Chromium-based)
CVSS 8.1
EPSS <1%2 agency advisoriesFix available
[ Description ]Official description
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.
[ Fixes ]Fixes and patches
- Patch on msrc.microsoft.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
[ Advisories ]Government CERT advisories
-
BSI CERT-BundWID-SEC-2026-4204
Microsoft Edge: Multiple vulnerabilities Translated from German
-
CERT-FRCERTFR-2026-AVI-1395
Multiple vulnerabilities in Microsoft Edge Translated from French
Multiple vulnerabilities have been discovered in Microsoft Edge. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and a breach of data confidentiality.
[ References ]References
- msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85899PatchVendor Advisory