Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2026-69486: Microsoft Edge can run attacker code remotely

CVE-2026-69486 · published 1 month ago

Summary

A coding mistake in Microsoft Edge (the Chromium-based browser) could let an outside attacker run their own program on your computer through the network. This could give the attacker control over the system or access to sensitive data. Install the latest security updates for Microsoft Edge as soon as they are available.

What to do

Update microsoft microsoft edge (chromium-based) to version 153.0.4234.32 or later.
Update microsoft edge_chromium to version 153.0.4234.32 or later.

Affected software

Vendor	Product	Affected versions
microsoft	microsoft edge (chromium-based)	< 153.0.4234.32
microsoft	edge_chromium	< 153.0.4234.32 `cpe:2.3:a:microsoft:edge_chromium::::::::`

Original advisory text

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69486 vendor-advisory patch

Fix within

Internet-facing 14 days

Internal At next upgrade

Not known to be exploited
Needs hands-on effort to exploit
Gives an attacker full control

Severity

8.8 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-122Heap-based Buffer Overflow

Timeline

Published15 Sep 2026

Updated4 Nov 2026

First seen15 Sep 2026

Sources

CVE-2026-69486 · NVD

CVE-2026-69486 · MITRE

Track software like this

Free during beta