Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

According to the CVSS metric, the attack vector is network (AV:N) and the user interaction is required (UI:R). What is the target context of the remote code execution?
This attack requires a victim to perform a specific action, such as copying files or executing a command, and for an attacker with appropriate access to have pre-planted malicious files with knowledge of where they should be placed on the victim's system.

What is the version information for this release?
151.0.4129.86: 151.0.4129.86, 08/14/2026: 08/14/2026, 151.0.7922.138: 151.0.7922.138

According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of confidentiality (C:H), and integrity (I:H), and some loss of availability (A:L). What does that mean for this vulnerability?
An attacker who successfully exploited this vulnerability could view sensitive information, a token in this scenario (Confidentiality) and make changes to disclosed information (Integrity), and they might be able to force a crash within the server (Availability).

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
The user must visit the attacker‑controlled webpage, and perform the two tap gestures that cause autofill to activate.

Security updates
151.0.4129.86 — https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security