{"id":"CVE-2026-62765","kind":"vulnerability","aliases":["CVE-2026-62765"],"related":[],"title":"Microsoft Edge: type confusion lets a remote attacker run code","description":"Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.","summary":"Microsoft Edge (Chromium-based) mishandles a resource of an incompatible type, a flaw known as type confusion. An unauthorized attacker can exploit it over a network to execute code.","severity":"high","cvss":7.5,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["desktop-users","microsoft-edge","package","windows"],"not_affected_if":["edge-not-installed"],"how_to_check":"- Open Edge and check the version under edge://settings/help and compare it with the patched release in the vendor's advisory\n- unknown","fix":"- Update Microsoft Edge to the latest Chromium-based release from Microsoft's security update guide\n- unknown","status":"open","published_at":"2026-10-27T22:17:29+00:00","first_seen_at":"2026-10-27T22:29:29+00:00","triaged_at":"2026-10-27T22:30:12+00:00","updated_at":"2026-10-27T22:30:12+00:00","category":"package","confidence":0.6,"triage":{"at":"2026-10-27T22:30:12Z","model":"claude-haiku-5-5","output":{"fix":"- Update Microsoft Edge to the latest Chromium-based release from Microsoft's security update guide\n- unknown","reach":"network","title":"Microsoft Edge: type confusion lets a remote attacker run code","impact":"high","summary":"Microsoft Edge (Chromium-based) mishandles a resource of an incompatible type, a flaw known as type confusion. An unauthorized attacker can exploit it over a network to execute code.","category":"package","nicknames":[],"who_cares":["microsoft-edge","windows","desktop-users"],"confidence":0.6,"needs_auth":"no","worst_case":"Attacker runs code on the victim's machine through the browser","analyst_note":"Check the Microsoft Security Response Center entry for CVE-2026-62765 for the affected and fixed Edge versions and whether user interaction is required.","how_to_check":"- Open Edge and check the version under edge://settings/help and compare it with the patched release in the vendor's advisory\n- unknown","needs_analyst":true,"not_affected_if":["edge-not-installed"],"who_is_affected":"Teams whose users browse with Microsoft Edge on managed or unmanaged Windows, macOS or Linux machines are exposed until updated. The sources do not say which Edge versions are vulnerable. Systems that do not run Edge can skip it.","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000577,"input_tokens":3272,"output_tokens":499,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':12A,15A '-62765':13A,16A 'access':55C 'allow':69C 'attack':8A,45B,72C 'base':29B,68C 'chromium':28B,67C 'chromium-bas':27B,66C 'code':10A,54B,75C 'confus':4A,42B,62C 'cve':11A,14A 'desktop':18B 'desktop-us':17B 'edg':2A,22B,26B,65C 'execut':53B,74C 'exploit':47B 'flaw':38B 'incompat':35B,59C 'known':39B 'let':5A 'microsoft':1A,21B,25B,64C 'microsoft-edg':20B 'mishandl':30B 'network':51B,78C 'packag':23B 'remot':7A 'resourc':32B,57C 'run':9A 'type':3A,36B,41B,60C,61C 'unauthor':44B,71C 'use':58C 'user':19B 'window':24B","nicknames":[],"mitigations":[],"who_affected":"Teams whose users browse with Microsoft Edge on managed or unmanaged Windows, macOS or Linux machines are exposed until updated. The sources do not say which Edge versions are vulnerable. Systems that do not run Edge can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-27T22:17:29+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-62765","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-62765","severity":null,"published_at":"2026-10-27T22:17:29+00:00","modified_at":"2026-10-27T22:17:29+00:00","first_seen_at":"2026-10-27T22:29:29+00:00","fetched_at":"2026-10-27T22:29:29+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}