CVE-2026-88097PATCHED

microsoft · microsoft edge (chromium-based)

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Description

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally.

Affected Products

Vendor	Product	Versions
microsoft	microsoft edge (chromium-based)	1.0.0.0

Also Affects

Downstream vendors/products affected by this vulnerability

Vendor	Product	Source	Confidence
microsoft	edge	cert_advisory	90%

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-88097(vendor-advisory, patch)

Related News (3 articles)

Tier B

BSI Advisories1d ago

[NEU] [hoch] Microsoft Edge: Schwachstelle ermöglicht Privilegieneskalation

→ No new info (linked only)

Tier B

CERT-FR1d ago

Multiples vulnérabilités dans Microsoft Edge (21 septembre 2026)

→ No new info (linked only)

Tier C

VulDB3d ago

CVE-2026-88097 | Microsoft Edge up to 153.0.4234.32 use after free

→ No new info (linked only)

Discussion (0)

Loading…

CVSS 3.18.1 HIGH

VectorCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C

CISA KEV❌ No

Actively exploited❌ No

Patch available

153.0.4234.46

CWECWE-416

PublishedSep 18, 2026

Trending Score43

Source articles3

Independent3

Info Completeness0/14

Missing: cve_id, title, description, vendor, product, versions, cvss, epss, cwe, kev, exploit, patch, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-85880EXPKEV

Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability

Trending: 55

HIGHCVE-2026-66804

Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability

Trending: 49

MEDIUMCVE-2026-55945EXP

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Trending: 44

CRITICALCVE-2026-70352

Azure AI Language Elevation of Privilege Vulnerability

Trending: 44

CRITICALCVE-2026-62916

Microsoft Entra ID Elevation of Privilege Vulnerability

Trending: 41

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Sep 18, 2026

Discovered by ZDM

Sep 18, 2026

Patch Available

Sep 20, 2026