CVE-2026-58285
HighCVSS 8.3Exploitation Probability (EPSS)
Low risk36th percentile — higher than 36% of all known CVEs
Summary
A type confusion vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network.
Risk Assessment
An attacker can exploit this flaw to gain control over the victim's system, leading to data theft, malware installation, or further attacks within the internal network.
Recommendation
Immediately update Microsoft Edge to the latest version available via the official update channel. Enforce policies to block unknown scripts and restrict access to suspicious websites.
Original NVD description (English source)
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

