Live › vulnerability › CVE-2026-85899
Use-after-free in Microsoft Edge (Chromium-based) lets an attacker who already runs code in Edge's sandbox (Low integrity) escape to Medium or High integrity. Microsoft rates it Important (CVSS 8.1), not exploited and not publicly disclosed, and fixed in 155.0.4283.45.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:26 UTC. All times on this page are UTC.
Anyone running Microsoft Edge (Chromium-based) older than 155.0.4283.45 on Windows desktops or managed fleets. It matters most as the second stage of a browser exploit chain, where code in the sandbox escapes it. Machines already on 155.0.4283.45 or later can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Edge (Chromium-based) | vendor | < 155.0.4283.45 | 155.0.4283.45 |
155.0.4283.45 are affectedC:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe | % VersionInfoUpdate Microsoft Edge (Chromium-based) to 155.0.4283.45 or later (edge://settings/help).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.
This page as .md · .json · in your agent: get_signal("CVE-2026-85899")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.