AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

MicrosoftCVE-2026-85893

Microsoft Edge (Chromium-based): use after free

Microsoft

CVE-2026-85893 · Published Sep 15, 2026 · updated Oct 30, 2026

High8.8
Fix: upgrade to 153.0.4234.32 or later
Microsoft advisory

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Affected versions

PackageAffectedFixed in
Microsoft Edge (Chromium-based)
Product
>= 1.0.0.0, < 153.0.4234.32153.0.4234.32

Changes since it was listed

SummaryNov 3Summary: Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network. to Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-416

More Microsoft advisories

All Microsoft
Critical 9.9Sep 17Microsoft Azure ARC: privilege escalationCVE-2026-69399no fix yetHigh 8.6Sep 17Microsoft Azure Machine Learning: improper authorizationCVE-2026-68791no fix yetMedium 6.1Sep 17Microsoft Copilot: command injectionCVE-2026-55946no fix yetHigh 8.8Sep 15Microsoft Edge (Chromium-based): heap buffer overflowCVE-2026-69486fixed in 153.0.4234.32High 8.2Sep 14Microsoft Windows 11 version 26H1: double freeCVE-2026-85921fixed in 10.0.28000.2956High 7.8Sep 14Microsoft Edge (Chromium-based): race conditionCVE-2026-85892fixed in 152.0.4191.66