Remote Code Execution Vulnerability in Microsoft Edge by Microsoft
CVE-2026-45495

8.8HIGH

Key Information:

Vendor

Microsoft

Vendor
CVE Published:
18 May 2026

What is CVE-2026-45495?

A remote code execution vulnerability exists in Microsoft Edge (Chromium-based) that could allow an attacker to execute arbitrary code on the target system. This vulnerability arises from improper handling of certain inputs, leading to a scenario where an attacker could exploit the flaw to gain control of the affected system. Users are advised to update their browsers to the latest version to mitigate this risk. For further guidance, users can consult the official Microsoft advisory and implement the necessary security patches.

Affected Version(s)

Microsoft Edge (Chromium-based) 1.0.0.0 < 148.0.3967.70

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.