Live › vulnerability › CVE-2026-85897
A heap-based buffer overflow in Microsoft Edge (Chromium-based) can be triggered by an unauthorized attacker over the network. The sources say this allows code execution.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:26 UTC. All times on this page are UTC.
Anyone running Microsoft Edge (Chromium-based) older than 154.0.4258.37, on desktop. An attacker needs a user to open a specially crafted web page or file, so people who browse or open untrusted content are the main risk. Machines already on Edge 154.0.4258.37 or later can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Edge (Chromium-based) | vendor | < 154.0.4258.37 | 154.0.4258.37 |
154.0.4258.37 you are exposed154.0.4258.37Update Microsoft Edge to 154.0.4258.37 or later (current stable 155.0.4283.62 per HKCERT/GovCERT.HK also covers it); edge://settings/help applies the update
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
This page as .md · .json · in your agent: get_signal("CVE-2026-85897")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.