critical9.0Public exploit code
CVE-2026-58289
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Edge 150.0.4078.48 - RCE2026-08-10 · local · multiple
Impact
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Edge Chromium | before 150.0.4078.48 |
| Microsoft | Microsoft Edge (Chromium-Based) | from 1.0.0.0 before 150.0.4078.48 |