Описание
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
FAQ
According to the CVSS metric, the attack vector is network (AV:N) and the attack complexity is low (AC:L). What does that mean for this vulnerability?
The attack vector is Network (AV:N) because this vulnerability is remotely exploitable and can be exploited from the internet. The attack complexity is Low (AC:L) because an attacker does not require significant prior knowledge of the system and can achieve repeatable success with the payload against the vulnerable component.
What is the version information for this release?
| Microsoft Edge Version | Date Released | Based on Chromium Version |
|---|---|---|
| 148.0.3967.70 | 05/15/2026 | 148.0.7778.168 |
Возможность эксплуатации
Publicly Disclosed
Exploited
Latest Software Release
EPSS
8.8 High
CVSS3
Связанные уязвимости
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Уязвимость браузера Microsoft Edge, связанная с неверным ограничением имени пути к каталог, позволяющая нарушителю выполнить произвольный код
EPSS
8.8 High
CVSS3