This vulnerability, identified as CVE-2026-58292 and classified under CWE-20 (Improper Input Validation), affects Microsoft Edge (Chromium-based) version 1.0.0.0. It allows an attacker without privileges to execute code remotely by exploiting improper input validation. The CVSS v3.1 base score is 7.5, indicating high severity, with network attack vector, high attack complexity, no privileges required, and user interaction required. The impact includes low confidentiality loss, high integrity loss, and low availability loss. Microsoft has released an official fix for this vulnerability, as documented in their security update guide.

An attacker can remotely execute code on a vulnerable Microsoft Edge (Chromium-based) browser without any privileges, potentially leading to significant integrity compromise and some confidentiality and availability impact. This could allow unauthorized actions within the browser context.

Microsoft has released an official fix for this vulnerability. Users and administrators should apply the security update provided by Microsoft as soon as possible. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58292 for detailed patching instructions.