CVE-2026-58281— Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Possible ATT&CK Techniques 1AI
T1203 · Exploitation for Client ExecutionAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Microsoft | Microsoft Edge (Chromium-based) | 1.0.0.0< 150.0.4078.48 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-58281
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Source: CVE Program / CVE List V5
Vulnerability Description
Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
可信数据的反序列化
Source: CVE Program / CVE List V5
Vulnerability Title
Microsoft Edge 反序列化注入漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Edge是美国Microsoft公司的一款Windows10附带的Web浏览器。 Microsoft Edge 150.0.4078.48之前版本存在反序列化注入漏洞，该漏洞源于反序列化不可信数据，可能导致未经授权的攻击者通过网络执行代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Microsoft | Microsoft Edge (Chromium-based) | 1.0.0.0 ~ 150.0.4078.48 | - |
II. Public POCs for CVE-2026-58281
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-58281
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-58281 (1)
IV. Related Vulnerabilities
Same product: Microsoft Edge (Chromium-based)
- CVE-2026-66326
Microsoft Edge (Chromium-based) Remote Code Execution Vulner - CVE-2026-66325
Microsoft Edge (Chromium-based) Spoofing Vulnerability - CVE-2026-66322
Microsoft Edge (Chromium-based) Spoofing Vulnerability - CVE-2026-66311
Microsoft Edge (Chromium-based) Tampering Vulnerability - CVE-2026-66317
Microsoft Edge (Chromium-based) Tampering Vulnerability
Same vendor: Microsoft
- CVE-2026-70332
Microsoft Office SharePoint Spoofing Vulnerability - CVE-2026-62873
Microsoft 365 Admin Center Elevation of Privilege Vulnerabil - CVE-2026-63508
Microsoft Planetary Computer Pro Elevation of Privilege Vuln - CVE-2026-50515
Azure Service Bus Remote Code Execution Vulnerability - CVE-2026-65667
Microsoft Teams Elevation of Privilege Vulnerability
Same weakness: CWE-502
- CVE-2026-68772
ZenML 0.94.6 Remote Code Execution via CloudpickleMaterializ - CVE-2026-71559
Apache Fory: Uncaught panic (remote DoS) in Go meta-string d - CVE-2026-71558
Apache Fory: Heap type confusion in C++ polymorphic smart-po - CVE-2026-71560
Apache Fory: Out-of-bounds heap read in C++ struct deseriali - CVE-2026-50515
Azure Service Bus Remote Code Execution Vulnerability
V. Comments for CVE-2026-58281
No comments yet