MicrosoftCVE-2026-58525

Microsoft Edge (Chromium-based): improper access control

High8.2CVE-2026-58525 · Published Jul 8, 2026 · updated Jul 9, 2026

Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

Microsoft advisory

Affected versions

Package	Affected	Fixed in
Microsoft Edge (Chromium-based) Product	>= 1.0.0.0, < 150.0.4078.50	150.0.4078.50

Details and references

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-284

More Microsoft advisories

Date	Advisory	Severity	Fixed in
Jul 12	Microsoft Edge (Chromium-based): privilege escalation High8.3Jul 12 CVE-2026-58596150.0.4078.48	High8.3	150.0.4078.48
Jul 11	Microsoft Edge (Chromium-based): unsafe deserialization High8.3Jul 11 CVE-2026-58281150.0.4078.48	High8.3	150.0.4078.48
Jul 9	Microsoft Dynamics 365 Customer Voice: cross-site scripting Critical9.3Jul 9 CVE-2026-47646No fix yet	Critical9.3	No fix yet
Jul 3	Microsoft Edge (Chromium-based): improper access control Medium6.5Jul 3 CVE-2026-58523150.0.4078.48	Medium6.5	150.0.4078.48
Jul 3	Microsoft Edge (Chromium-based): cross-site scripting Medium5.4Jul 3 CVE-2026-58524150.0.4078.48	Medium5.4	150.0.4078.48
Jul 3	Microsoft Edge (Chromium-based): spoofing Medium4.3Jul 3 CVE-2026-58597150.0.4078.48	Medium4.3	150.0.4078.48

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.