Loading vulnerability…
Remote Code Execution in Microsoft Edge (Chromium-based)
CVE-2026-58284 is an improper authorization vulnerability in Microsoft Edge (Chromium-based) that can result in remote code execution. The available information indicates that the flaw is reachable over the network and affects Microsoft Edge versions prior to 150.0.4078.48. Exploitation requires user interaction, such as visiting attacker-controlled web content or opening a specially crafted file in Edge. No further public technical detail about the specific vulnerable component or function is currently available.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation allows an unauthorized attacker to execute code in the context of Microsoft Edge. Given the published CVSS characteristics, exploitation can lead to high-impact compromise of confidentiality, integrity, and availability within the browser context, including access to sensitive data handled by the browser, modification of data or browser state, and disruption of browser operation. The issue is rated High severity with CVSS v3.1 8.3.
If you can’t patch tonight, do this now.
No dedicated vendor workaround is described. Until updates are fully deployed, reduce exposure by limiting access to untrusted websites, preventing users from opening untrusted files or attachments in Edge, and applying enterprise browser hardening and content-filtering controls where possible.
Patch, then assume compromise.
Upgrade Microsoft Edge (Chromium-based) to version 150.0.4078.48 or later and apply the vendor-provided security updates released on 2026-07-03. Standard remediation is to ensure affected systems receive the latest Edge stable-channel security update across all managed endpoints.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
7 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.