This vulnerability (CVE-2026-70339) in Microsoft Edge (Chromium-based) is caused by a type confusion issue (CWE-843) where a resource is accessed using an incompatible type. This flaw enables an unauthorized attacker to execute code remotely over a network. The CVSS 3.1 base score is 5.4, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, but requiring user interaction. Confidentiality and integrity impacts are low, with no availability impact. No patch or remediation details are provided in the available data.

An attacker can remotely execute code on a vulnerable Microsoft Edge browser by exploiting the type confusion vulnerability. The impact is limited to low confidentiality and integrity loss, with no availability impact. The attack requires user interaction but no privileges or complex conditions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch information is provided in the available data. Users and administrators should monitor Microsoft security advisories for updates and apply patches once available.