AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

MicrosoftCVE-2026-85892

Microsoft Edge (Chromium-based): race condition

Microsoft

CVE-2026-85892 · Published Sep 14, 2026 · updated Sep 25, 2026

High7.8
Fix: upgrade to 152.0.4191.66 or later
Microsoft advisory

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.

Affected versions

PackageAffectedFixed in
Microsoft Edge (Chromium-based)
Product
>= 1.0.0.0, < 152.0.4191.66152.0.4191.66
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-362

More Microsoft advisories

All Microsoft
Medium 6.1Sep 17Microsoft Copilot: command injectionCVE-2026-55946no fix yetHigh 8.8Sep 15Microsoft Edge (Chromium-based): use after freeCVE-2026-85893fixed in 153.0.4234.32High 8.8Sep 15Microsoft Edge (Chromium-based): heap buffer overflowCVE-2026-69486fixed in 153.0.4234.32High 8.2Sep 14Microsoft Windows 11 version 26H1: double freeCVE-2026-85921fixed in 10.0.28000.2956Medium 6.1Sep 11Microsoft Edge (Chromium-based): cross-site scriptingCVE-2026-77490fixed in 151.0.4129.107High 8.5Sep 11Microsoft Edge: use after freeCVE-2026-70341fixed in 152.0.4191.52 +2