The vulnerability is a use‑after‑free flaw Microsoft Edge based on Chromium. It permits an attacker who can influence the data that the browser processes over a network connection to execute arbitrary code. The flaw can compromise confidentiality, integrity, and availability by allowing an attacker to run malicious code with the privileges of the Edge process, potentially leading to full system takeover. The description explicitly a network, so the attack can target users without local credentials. Based on the description, it is inferred that the attacker can craft network traffic that triggers the use‑after‑free.

Microsoft Edge (Chromium‑based) is the impacted product. No version range is provided, so any installation that has not received the latest security updates may be susceptible.

The CVSS score of 7.5 places the vulnerability in the high‑severity category. The EPSS score of less than 1% indicates a very low probability of exploitation, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is via network traffic to Edge, where a crafted payload could exploit the memory error. A determined attacker could use this flaw to gain remote code execution on the affected device. The combination of a high CVSS with a low EPSS suggests that while the flaw is severe, exploitation in the wild is currently unlikely.