Live › vulnerability › CVE-2026-88077
Integer overflow (CWE-190) in Microsoft Edge (Chromium-based). An attacker who gets a user to open a crafted website could gain SYSTEM privileges. Microsoft rates it Important, CVSS 8.8, not exploited, not publicly disclosed. Fixed in 154.0.4258.62.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-29 16:26 UTC. All times on this page are UTC.
Anyone running Microsoft Edge (Chromium-based) older than 154.0.4258.62. Exploitation needs the user to view an attacker-controlled page, usually through a phishing link. Machines with Edge already updated can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| Microsoft Edge (Chromium-based) | vendor | < 154.0.4258.62 | 154.0.4258.62 |
154.0.4258.62 are vulnerableUpdate Microsoft Edge (Chromium-based) to 154.0.4258.62 or later (Edge menu > Help and feedback > About Microsoft Edge).
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
This page as .md · .json · in your agent: get_signal("CVE-2026-88077")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.