This vulnerability is a use-after-free flaw (CWE-416) in Microsoft Edge (Chromium-based) that enables an unauthorized local attacker to elevate privileges. The affected versions are all versions starting from 1.0.0.0 up to but excluding 153.0.4234.46. The CVSS 3.1 base score is 8.1, indicating high severity, with attack vector local, high attack complexity, no privileges required, no user interaction, and impacts confidentiality, integrity, and availability with high severity. Microsoft has published an official fix for this vulnerability as documented in their security update guide.

An unauthorized local attacker can exploit this use-after-free vulnerability to elevate privileges on the affected system. This can lead to full compromise of confidentiality, integrity, and availability of the system running the vulnerable Microsoft Edge version. No known exploits are currently active in the wild.

Microsoft has released an official fix for this vulnerability. Users and administrators should apply the security update provided by Microsoft to versions 153.0.4234.46 and later to remediate this issue. No additional mitigation steps are required beyond applying the official patch.