This vulnerability (CVE-2026-85893) is a use-after-free flaw (CWE-416) in Microsoft Edge (Chromium-based) that enables an attacker to elevate privileges remotely over a network. The affected versions are from 1.0.0.0 up to 153.0.4234.32. The CVSS 3.1 base score is 8.8, indicating high severity, with attack vector network, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability all rated high. Microsoft has published an official fix for this vulnerability.

Successful exploitation of this use-after-free vulnerability could allow an attacker to elevate privileges on the affected system remotely, potentially leading to full compromise of confidentiality, integrity, and availability of the system running Microsoft Edge (Chromium-based). No known exploits in the wild have been reported at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update for Microsoft Edge (Chromium-based) to versions 153.0.4234.32 or later as provided in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85893.