This vulnerability (CWE-362) involves a race condition in Microsoft Edge (Chromium-based) where concurrent execution using a shared resource is improperly synchronized. This flaw enables an authorized attacker with local access to potentially disclose sensitive information. The CVSS 3.1 base score is 4.2, reflecting low attack vector (local), high attack complexity, low privileges required, no user interaction, and partial confidentiality and integrity impact. Microsoft has published an official fix for this issue.

An authorized local attacker can exploit this race condition to disclose information on the affected system. The impact is limited to confidentiality and integrity with no availability impact. The attack requires local access and has high complexity, reducing the likelihood of exploitation but still posing a risk to sensitive data.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-55945 to remediate this vulnerability.