MICROSOFT-CVE-2026-42838

MEDIUM5.4

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Published May 11, 2026

Modified 1 months ago

Details

Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

References

ADVISORY

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42838

CVSS Analysis

CVSS v2.0

5.4

Upstream

CVE-2026-42838

Ecosystems

Timeline

PublishedMay 11, 2026

ModifiedMay 11, 2026