{"id":"CVE-2026-88090","kind":"vulnerability","aliases":["CVE-2026-88090"],"related":[],"title":"Microsoft Edge: type confusion lets a remote attacker gain elevated privileges","description":"Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.","summary":"A type confusion flaw in Chromium-based Microsoft Edge lets code access a resource as the wrong type. According to the NVD entry, an unauthorized attacker on the network can use it to elevate privileges.","severity":"medium","cvss":5.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["chromium","microsoft-edge","other","windows"],"not_affected_if":[],"how_to_check":"- Open Edge and go to `edge://settings/help` to read the installed version","fix":null,"status":"open","published_at":"2026-10-29T16:19:54+00:00","first_seen_at":"2026-10-29T16:26:01+00:00","triaged_at":"2026-10-29T16:31:42+00:00","updated_at":"2026-10-29T16:31:42+00:00","category":"other","confidence":0.4,"triage":{"at":"2026-10-29T16:31:42Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"Microsoft Edge: type confusion lets a remote attacker gain elevated privileges","impact":"high","summary":"A type confusion flaw in Chromium-based Microsoft Edge lets code access a resource as the wrong type. According to the NVD entry, an unauthorized attacker on the network can use it to elevate privileges.","audience":"everyone","category":"other","nicknames":[],"who_cares":["microsoft-edge","chromium","windows"],"confidence":0.4,"fix_status":"unknown","needs_auth":"unknown","worst_case":"attacker gains elevated privileges over the network","analyst_note":"Check the Microsoft Security Response Center entry for CVE-2026-88090 for affected version ranges, fixed build, and whether user interaction is required.","how_to_check":"- Open Edge and go to `edge://settings/help` to read the installed version\n- unknown","plain_action":"Update Microsoft Edge to the latest version through its built-in update check.","needs_analyst":true,"not_affected_if":[],"who_is_affected":"unknown","user_interaction":"unknown","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000619,"input_tokens":4084,"output_tokens":421,"severity_before":"medium"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-88090':14A,17A 'access':36B,60C 'accord':43B 'allow':74C 'attack':8A,50B,77C 'base':31B,73C 'chromium':18B,30B,72C 'chromium-bas':29B,71C 'code':35B 'confus':4A,26B,67C 'cve':12A,15A 'edg':2A,21B,33B,70C 'elev':10A,58B,79C 'entri':47B 'flaw':27B 'gain':9A 'incompat':64C 'let':5A,34B 'microsoft':1A,20B,32B,69C 'microsoft-edg':19B 'network':53B,83C 'nvd':46B 'privileg':11A,59B,80C 'remot':7A 'resourc':38B,62C 'type':3A,25B,42B,65C,66C 'unauthor':49B,76C 'use':55B,63C 'window':23B 'wrong':41B","nicknames":[],"mitigations":[],"who_affected":null,"tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":"Update Microsoft Edge to the latest version through its built-in update check.","first_public_at":"2026-10-29T16:19:54+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N","cvss_by":"secure@microsoft.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-88090","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-88090","severity":null,"published_at":"2026-10-29T16:19:54+00:00","modified_at":"2026-10-29T16:19:54+00:00","first_seen_at":"2026-10-29T16:26:01+00:00","fetched_at":"2026-10-29T16:26:01+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}