MEDIUM CWE-362
CVE-2026-55945
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft·Edge (Chromium-based)
4.2/ 10
CVSS 3.1
Medium severity
0.19%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 8% of all CVEs
Not listed
CISA KEV catalog
No confirmed in-the-wild exploitation on CISA's list.
Timeline
- Published
- Jul 3, 2026
- Updated
- Nov 1, 2026
- First covered
- Sep 19, 2026
- Latest story
- 2 months ago
Summary
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to disclose information locally.
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Attack profile
Attack vectorLocal
ComplexityHigh
PrivilegesLow
User interactionNone
ScopeChanged
ConfidentialityLow
IntegrityLow
AvailabilityNone
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N/E:U/RL:O/RC:CAffected products
- Microsoft Edge (Chromium-based)1.0.0.0 to before 150.0.4078.48