This vulnerability in Microsoft Edge (Chromium-based) is caused by type confusion (CWE-843), where the software accesses a resource using an incompatible type. This flaw can be exploited by an attacker over a network to execute arbitrary code with potentially high impact on integrity and limited impact on availability. The CVSS v3.1 score is 7.5, reflecting a high severity with network attack vector, high attack complexity, no privileges required, and user interaction required. Microsoft has published an official fix for this vulnerability.

Successful exploitation allows an attacker to execute arbitrary code remotely on the affected system, potentially compromising system integrity and causing limited availability impact. Confidentiality impact is low. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Microsoft Edge (Chromium-based) to remediate this vulnerability. Refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58290 for patch details and update instructions.