AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

MicrosoftCVE-2026-50521

Microsoft Edge (Chromium-based): use after free

Microsoft

CVE-2026-50521 · Published Jul 1, 2026 · updated Jul 3, 2026

High8.3
Fix: upgrade to 149.0.4022.68 or later
Microsoft advisory

Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.

Affected versions

PackageAffectedFixed in
Microsoft Edge (Chromium-based)
Product
>= 1.0.0.0, < 149.0.4022.68149.0.4022.68
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-416

More Microsoft advisories

All Microsoft
High 8.8Jul 3Microsoft Edge (Chromium-based): integer overflowCVE-2026-57974fixed in 150.0.4078.48Critical 9.9Jul 2Microsoft Entra Provisioning Service: server-side request forgeryCVE-2026-57100no fix yetHigh 8.8Jul 2Microsoft Exchange Online: improper authorizationCVE-2026-54998no fix yetCritical 9.9Jul 2Microsoft Azure Open AI: server-side request forgeryCVE-2026-45499no fix yetCritical 9.3Jul 2Microsoft 365 Copilot: open redirectCVE-2026-41106no fix yetMedium 4.8Jul 2Microsoft Azure Synapse: improper access controlCVE-2026-26145no fix yet