Remote Code Execution Vulnerability in Microsoft Edge by Microsoft
CVE-2026-70341

8.5HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft Edge (chromium-based)
Microsoft Edge For Android
Microsoft Edge For iOS
Microsoft Edge For Linux
Vendor
CVE Published:
11 September 2026

What is CVE-2026-70341?

A use after free vulnerability in Microsoft Edge (Chromium-based) could allow an attacker to execute arbitrary code remotely. This flaw could be exploited by an authorized user, potentially putting systems at risk. Detailed patches and mitigation strategies are available to enhance defense against such threats. For more information, refer to the Microsoft vendor advisory.

Affected Version(s)

Microsoft Edge (Chromium-based) 1.0.0.0 < 152.0.4191.52

Microsoft Edge for Android 1.0.0.0 < 152.0.4191.52

Microsoft Edge for iOS 1.0.0.0 < 152.0.4191.52

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
8.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.