A type confusion vulnerability in Microsoft Edge (Chromium-based) allows an attacker to execute code remotely by accessing a resource with an incompatible type. This results in the attacker being able to run arbitrary code in the context of the Edge browser, potentially compromising the host system.

Microsoft Edge (Chromium-based) browsers are affected. Version information is not provided in the advisory, so all builds of the Chromium‑based Edge product may be vulnerable until the patch is applied.

The vulnerability has a CVSS score of 7.5, indicating moderate to high severity. The EPSS score is not available, so the current exploit probability is unknown, and the vulnerability is not listed in the CISA KEV catalog. The description states that the attack can occur over a network, so the likely attack vector is remote network exploitation. Exploitation would achieve remote code execution via type confusion (CWE‑843).