Advisoriesby IbisMicrosoftCVE-2026-58616
Microsoft Edge: race condition
Fix: upgrade to 152.0.4191.53 or later (3 fixed versions below)
Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to disclose information over a network.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Microsoft Edge (Chromium-based) Product | >= 1.0.0.0, < 152.0.4191.53 | 152.0.4191.53 |
| Microsoft Edge for Android Product | >= 1.0.0.0, < 152.0.4191.52 | 152.0.4191.52 |
| Microsoft Edge for Linux Product | >= 1.0.0, < 152.0.4191.52 | 152.0.4191.52 |
| Microsoft Edge for MAC Product | >= 1.0.0.0, < 152.0.4191.52 | 152.0.4191.52 |
| Microsoft Edge for Windows Product | >= 1.0.0.0, < 152.0.4191.52 | 152.0.4191.52 |
| Microsoft Edge for iOS Product | >= 1.0.0.0, < 152.0.4191.52 | 152.0.4191.52 |
Changes since it was listed
Fixed in: Microsoft Edge for Android 152.0.4191.52, Microsoft Edge for iOS 152.0.4191.52, Microsoft Edge for Linux 152.0.4191.52 to Microsoft Edge (Chromium-based) 152.0.4191.53, Microsoft Edge for Android 152.0.4191.52, Microsoft Edge for iOS 152.0.4191.52
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-362