An untrusted pointer dereference flaw in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. The vulnerability is a CWE-822 weakness that involves dereferencing a pointer without proper verification. Exploiting the flaw can give the attacker higher-level access on the target machine.

Microsoft Edge (Chromium-based). All supported Edge releases published before the issuance of the patch are potentially vulnerable. No specific version numbers are listed, so all unpatched installations are considered affected.

The CVSS score of 8.3 signals high severity, while the EPSS score of less than 1% indicates a low likelihood of exploitation currently. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is network-based, requiring an unpatched Edge installation and sufficient network access. If successfully exploited, an attacker could elevate privileges on the host system.