Improper privilege management in Microsoft Edge (Chromium-based) enables an authorized user to bypass a built‑in security feature locally. The weakness falls under CWE‑269, indicating a failure in privilege management to enforce the intended access controls. As a result, the attacker can manipulate or extend Edge’s behavior beyond the intended limits, potentially affecting the confidentiality or integrity of user data within the browser context.

Microsoft Edge (Chromium-based) for Windows. No specific version details are provided; users should consult Microsoft’s update guide for applicable patches.

The CVSS score of 7.1 signifies a Medium‑High severity. EPSS is under 1 %, indicating a low probability of active exploitation. The vulnerability is not listed in the CISA KEV catalog. Attackers must be locally authenticated and able to run Edge; the flaw does not require remote exploitation or elevated system privileges, so the risk is confined to the immediate user session.