Skip to content
OpenAdvisories
Medium MSRC-CVE-2026-88090 1 CVE

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Published Oct 26, 2026 · Updated Oct 26, 2026 · Revision 2

Vendor: Microsoft

Summary

Impact: Elevation of Privilege. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), and integrity (I:L) but lead to no loss of availability (A:N). What is the impact of this vulnerability?
An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality), make changes to disclosed information (Integrity), but cannot limit access to the resource (Availability).

There are multiple update packages available for some of the affected software. Do I need to install all the updates listed in the Security Updates table for the software?
Yes. Customers should apply all updates offered for the software installed on their systems. If multiple updates apply, they can be installed in any order.

Security updates
154.0.4258.37 — https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security

Vulnerabilities 1

  • Medium 5.4
    CVE-2026-88090

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

    Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

    Microsoft Microsoft Edge (Chromium-based) Browsers

Revision history

  1. #1

    Information published.

  2. #2

    Added Edge software to the Security Updates table. Customers that are running supported version of Edge are encouraged to update to the indicated version to be protected from this vulnerability.

References