Loading vulnerability…
Use-After-Free RCE in Microsoft Edge (Chromium-based)
CVE-2026-57981 is a high-severity use-after-free vulnerability in Microsoft Edge (Chromium-based) that can lead to remote code execution. The flaw arises from improper handling of object lifetime in browser memory, allowing previously freed memory to be reused in an unsafe manner. Under attacker-controlled conditions, this memory corruption condition can be triggered through network-delivered content processed by the browser. Microsoft classifies the issue as affecting Edge prior to version 150.0.4078.48.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation can allow an unauthorized attacker to execute arbitrary code in the context of the affected Microsoft Edge process. Because the vulnerability is rated with high confidentiality, integrity, and availability impact, exploitation may enable full compromise of data accessible to the browser context, modification of that data, and process-level disruption or crash. In practical terms, this can provide an initial code execution foothold on a target system through malicious web content.
If you can’t patch tonight, do this now.
Apply the latest Microsoft Edge security updates on an expedited basis and enforce browser restarts so the patched version becomes active. Until patching is complete, reduce exposure by limiting access to untrusted web content where feasible and monitoring enterprise endpoints to confirm the deployed Edge version and associated runtime components are current.
Patch, then assume compromise.
Upgrade Microsoft Edge (Chromium-based) to version 150.0.4078.48 or later and ensure the vendor security update released in July 2026 is fully applied. Because Edge updates may not become effective until the browser is restarted, verify that endpoints are running the patched build after update deployment.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
8 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.