[ CVE-2026-88090 · Published 29 Oct 2026 ]
Vulnerability in Microsoft Edge (Chromium-based)
CVSS 5.4
EPSS <1%2 agency advisoriesFix available
[ Description ]Official description
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
[ Fixes ]Fixes and patches
- Patch on msrc.microsoft.comVendor patch or bulletin · NVD · Reference tagged 'Patch' by NVD
[ Advisories ]Government CERT advisories
-
BSI CERT-BundWID-SEC-2026-4204
Microsoft Edge: Multiple vulnerabilities Translated from German
-
CERT-FRCERTFR-2026-AVI-1395
Multiple vulnerabilities in Microsoft Edge Translated from French
Multiple vulnerabilities have been discovered in Microsoft Edge. Some of them allow an attacker to cause remote arbitrary code execution, privilege escalation and a breach of data confidentiality.
[ References ]References
- msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88090PatchVendor Advisory