This vulnerability (CVE-2026-70341) is a use-after-free condition in Microsoft Edge (Chromium-based) that permits an authorized attacker to execute arbitrary code remotely. The affected versions are all releases starting from 1.0.0.0 up to but excluding 152.0.4191.52. The vulnerability has a CVSS 3.1 score of 8.5, indicating high impact on confidentiality, integrity, and availability. Microsoft has issued an official fix to address this vulnerability as documented in their security update guide.

Successful exploitation of this use-after-free vulnerability allows an authorized attacker to execute arbitrary code remotely, potentially leading to full compromise of the affected system. The vulnerability impacts confidentiality, integrity, and availability with high severity.

An official fix is available from Microsoft. Users and administrators should apply the security update for Microsoft Edge (Chromium-based) to versions 152.0.4191.52 or later to remediate this vulnerability. No additional mitigation steps are indicated by the vendor advisory.