MicrosoftCVE-2026-58596

Microsoft Edge (Chromium-based): privilege escalation

High8.3CVE-2026-58596 · Published Jul 12, 2026 · updated Jul 14, 2026

Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

Microsoft advisory

Affected versions

Package	Affected	Fixed in
Microsoft Edge (Chromium-based) Product	>= 1.0.0.0, < 150.0.4078.48	150.0.4078.48

Details and references

CVSS 3.1: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-822

More Microsoft advisories

Date	Advisory	Severity	Fixed in
Jul 14	Microsoft Windows Media: information disclosure Medium5.5Jul 14 CVE-2026-3434910.0.17763.9020+7 more	Medium5.5	10.0.17763.9020+7 more
Jul 14	Microsoft Windows Event Logging Service: protection mechanism failure Medium6.5Jul 14 CVE-2026-3434810.0.17763.9020+8 more	Medium6.5	10.0.17763.9020+8 more
Jul 14	Microsoft Windows Ancillary Function Driver for WinSock: cleartext secrets Medium5.5Jul 14 CVE-2026-3434610.0.14393.9339+9 more	Medium5.5	10.0.14393.9339+9 more
Jul 14	Microsoft Windows Audio Service: information disclosure Medium5.5Jul 14 CVE-2026-3432810.0.17763.9020+8 more	Medium5.5	10.0.17763.9020+8 more
Jul 14	Microsoft Windows File Explorer: information disclosure Medium5.5Jul 14 CVE-2026-3384210.0.14393.9339+8 more	Medium5.5	10.0.14393.9339+8 more
Jul 11	Microsoft Edge (Chromium-based): unsafe deserialization High8.3Jul 11 CVE-2026-58281150.0.4078.48	High8.3	150.0.4078.48

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.