A use‑after‑free flaw in Microsoft Edge (Chromium‑based) allows an attacker to cause the browser to access memory that has already been released, paving the way for arbitrary code execution. The flaw allows an unauthorized attacker to exploit it over a network.

Microsoft Edge (Chromium‑based) is affected; no specific version ranges were supplied.

The CVSS score of 7.5 signals high severity less than 1 % indicates a very low likelihood of exploitation in the wild at this time. The vulnerability is not listed in the CISA KEV catalog, and no large‑scale incidents are documented. Based on the description, the attack is inferred to be triggered by a malicious document or a crafted URL delivered over the network, which would enable remote code execution on the host.