Race Condition Vulnerability in Copilot Chat by Microsoft
CVE-2026-58616

4.4MEDIUM

Key Information:

Vendor

Microsoft
Status
Microsoft Edge (chromium-based)
Microsoft Edge For Android
Microsoft Edge For iOS
Microsoft Edge For Linux
Vendor
CVE Published:
28 August 2026

What is CVE-2026-58616?

A race condition vulnerability in the Copilot Chat feature of Microsoft Edge can allow an attacker with authorized access to exploit synchronization flaws. This improper handling of concurrent executions might enable the unauthorized disclosure of sensitive information over the network, posing a significant risk for affected users. Mitigation steps and updates are recommended to address this security concern.

Affected Version(s)

Microsoft Edge (Chromium-based) -

Microsoft Edge for Android 1.0.0.0 < 152.0.4191.52

Microsoft Edge for iOS 1.0.0.0 < 152.0.4191.52

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.