This vulnerability is a heap-based buffer overflow in Microsoft Edge (Chromium-based) that could allow remote code execution by an attacker without privileges. It affects all versions starting from 1.0.0.0 up to 153.0.4234.32. The CVSS 3.1 base score is 8.8, indicating high impact on confidentiality, integrity, and availability. Microsoft has published an official fix, and the vendor advisory is available at the Microsoft Security Response Center. Exploitation requires user interaction but no privileges.

Successful exploitation could allow an attacker to execute arbitrary code remotely, potentially leading to full compromise of the affected system. The vulnerability impacts confidentiality, integrity, and availability with high severity. There are no reports of active exploitation in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update for Microsoft Edge (Chromium-based) to versions 153.0.4234.32 or later to remediate this vulnerability. Refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69486 for detailed patch information and update instructions.