Description
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Published: 2026-08-03
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

A use‑after‑free bug in the Chromium rendering engine of Microsoft Edge allows an unauthorized attacker to execute code over a network. The flaw, which is classified as CWE‑416, can let an attacker run arbitrary code with the privileges of the Edge process and potentially compromise the user’s data or the broader system.

Affected Systems

Microsoft Edge (Chromium‑based) is affected. No specific version range is supplied; the vulnerability applies to the product until a vendor patch is applied.

Risk and Exploitability

The CVSS score of 7.5 indicates high severity. The EPSS score is not available, but the attack vector is remote, relying on network traffic that can trigger the use‑after‑free in the browser. The vulnerability is not currently listed in the CISA KEV catalog, suggesting no known large‑scale exploitation, yet the potential for remote code execution remains substantial.

Generated by OpenCVE AI on August 4, 2026 at 09:31 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update Microsoft Edge to the latest version that contains the fix for CVE‑2026‑66315, preferably via Windows Update or by downloading the newest Edge installer from Microsoft’s website.
  • After updating, restart Microsoft Edge and any associated services to ensure the patch takes effect.
  • Apply network perimeter controls or endpoint detection that restricts the browser’s access to untrusted sites, thus reducing the opportunity for exploitation until the patch is fully deployed.

Generated by OpenCVE AI on August 4, 2026 at 09:31 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 04 Aug 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Mon, 03 Aug 2026 23:30:00 +0000

Type Values Removed Values Added
Description Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Title Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
First Time appeared Microsoft
Microsoft edge Chromium
Weaknesses CWE-416
CPEs cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*
Vendors & Products Microsoft
Microsoft edge Chromium
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C'}

Subscriptions

Microsoft Edge Chromium
cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published:

Updated: 2026-08-20T17:02:05.598Z

Reserved: 2026-07-24T18:06:51.295Z

Link: CVE-2026-66315

cve-icon Vulnrichment

Updated: 2026-08-04T14:00:00.652Z

cve-icon NVD

Status : Analyzed

Published: 2026-08-04T00:17:38.927

Modified: 2026-08-06T17:03:52.187

Link: CVE-2026-66315

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-04T09:45:03Z

Weaknesses