This vulnerability, identified as CWE-269 (Improper Privilege Management), exists in Microsoft Edge (Chromium-based) and permits an authorized local attacker to bypass a security feature. The CVSS 3.1 base score is 7.1, reflecting high severity with local attack vector, low attack complexity, and requiring low privileges but no user interaction. Confidentiality and integrity impacts are high, while availability is not affected. Microsoft has published an official fix for this issue.

An authorized local attacker can bypass a security feature in Microsoft Edge (Chromium-based), potentially leading to unauthorized access or modification of sensitive information. The confidentiality and integrity of data are highly impacted, but availability remains unaffected. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the provided security update promptly to remediate this vulnerability. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-21223 for detailed patch information and guidance.