The vulnerability is an incorrect authorization flaw that allows an attacker with local user privileges to elevate to higher privileges in Microsoft Edge (Chromium-based). The weakness is categorized as CWE‑863, indicating that security checks are bypassed or not properly transferred. This flaw does not allow immediate remote access or complete system takeover, but it can enable an authorized user to gain elevated rights on the affected system.

Microsoft Edge (Chromium-based) is the affected product. No specific version identifiers are provided in this report, so any installations of the Chromium-based Edge that have not received the latest security updates may be vulnerable.

The CVSS score of 4.4 indicates moderate risk. EPSS data is not available, and the vulnerability is not registered in the CISA KEV catalog. Because the flaw requires a local authorized user, the attack vector is inferred to be local privilege escalation. If a user can launch Edge and interact with the application, they could potentially bypass authorization checks to gain higher privileges on the host system.