A type confusion flaw (CWE‑843) in Microsoft Edge (Chromium‑based) allows an unauthorized attacker to bypass a security feature over a network. The issue occurs when the browser processes a resource that uses an incompatible type. The CVE description indicates that this type confusion can bypass a built‑in protection mechanism, potentially allowing further exploitation. The description does not mention exposure of secrets or privilege escalation.

All released builds of Microsoft Edge (Chromium‑based) are impacted. The CNA description provides no version exemptions, so every current and past version deployed in an environment should be considered vulnerable until a vendor patch is applied.

The CVSS score of 8.3 indicates a high‑severity issue. The EPSS score of less than 1% suggests that exploitation is unlikely, and the vulnerability is not listed in CISA’s KEV catalog. Based on the description, the attacker would need to deliver specially crafted content over the network to the victim’s Edge browser to bypass the security feature.