CVE-2026-58289

Critical · CVSS 9.0

Microsoft Edge (Chromium-based) — Type Confusion Remote Code Execution

CVSS: 9.0; nvd
EPSS: 0.53%; 41th pct
KEV: No
Class: other; CWE-843

Description

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Search profile — drives PoC discovery

Symbols CWE-843type confusionCVE-2026-58289ChromiumV8JavaScript engine

Keywords CVE-2026-58289Microsoft Edge type confusion RCEChromium type confusion exploitEdge Chromium CWE-843 PoCMicrosoft Edge remote code execution 2026type confusion browser exploit EdgeV8 type confusion CVE-2026-58289

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58289

Status: enriched · ingested 2026-07-07T18:00:32.000Z · profiled 2026-07-07T18:30:32.000Z