CVE Almanac
← All CVEs

CVE-2026-50521

HIGH 8.3

Published 2026-07-01 · Last modified 2026-07-01

Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.

ELEVATED IMPACT

Severe if exploited (CVSS 8.3), but no known exploitation and low modeled probability. Patch on a normal cadence.

Exploitation likelihood

—EPSS not yet scored

○ In CISA KEV ○ Public exploit / PoC

Impact if exploited

8.3CVSS 3.1 · HIGH

  • ConfidentialityHigh
  • IntegrityHigh
  • AvailabilityLow

What an attacker needs

  • ✓Access: Reachable over the network — no local access needed
  • ⚠Privileges: Requires a low-privilege account
  • ✓User interaction: No user interaction needed
  • ✓Complexity: No special conditions — reliably repeatable

✓ lowers the bar for an attacker · ⚠ raises it

Affected

Vendors Microsoft

Products Microsoft Edge (Chromium Based)

Weakness (CWE)

  • CWE-416: Use after free

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L/E:U/RL:O/RC:C

References

Patches & mitigations

Sources: NVD · CVE.org · EPSS