This vulnerability, identified as CWE-822 (Untrusted Pointer Dereference), affects Microsoft Edge (Chromium-based). It enables an attacker without privileges to cause a pointer dereference of untrusted data, potentially leading to privilege escalation. The CVSS 3.1 base score is 8.3, indicating high severity, with network attack vector, high attack complexity, no privileges required, user interaction required, and scope changed. Microsoft has published an official fix for this vulnerability.

Successful exploitation allows an unauthorized attacker to elevate their privileges on a system running the affected Microsoft Edge version. This could result in full control over the affected system, impacting confidentiality, integrity, and availability.

An official fix is available from Microsoft. Users and administrators should apply the security update provided in the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58596 to remediate this vulnerability.