The vulnerability arises from an integer overflow or wraparound flaw discovered in Microsoft Edge (Chromium based). When user‑controlled data is improperly handled, the browser can compute an incorrect size or index, enabling an attacker to trigger privileged operations. The flaw allows an unauthorized attacker to elevate privileges over a network. This is a classic CWE‑190 integer overflow issue.

Microsoft Edge (Chromium based) is the affected product. No specific product versions are listed, so all current deployments should be considered potentially vulnerable.

The CVSS score of 8.8 indicates high severity, while the EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. The attack vector is inferred to be network‑based, as the flaw arises when the browser processes network content. An exploit would involve overcoming the integer overflow to gain elevated privileges on the client machine. The risk is therefore considered high, especially for environments that run untrusted web content.