4.4
Medium
CVE-2026-58616 Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft…
Description
Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to disclose information over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Edge (Chromium-based) 1.0 | 1.0.0.0 → < 152.0.4191.53 | 152.0.4191.53 |
| Microsoft Edge for Android 1.0 | 1.0.0.0 → < 152.0.4191.52 | 152.0.4191.52 |
| Microsoft Edge for iOS 1.0 | 1.0.0.0 → < 152.0.4191.52 | 152.0.4191.52 |
| Microsoft Edge for Linux 1.0 | 1.0.0 → < 152.0.4191.52 | 152.0.4191.52 |
| Microsoft Edge for MAC 1.0 | 1.0.0.0 → < 152.0.4191.52 | 152.0.4191.52 |
| Microsoft Edge for Windows 1.0 | 1.0.0.0 → < 152.0.4191.52 | 152.0.4191.52 |
References
- Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Edge (Chromium-based)
The 301 CVEs of Microsoft Edge (Chromium-based) →
CVE-2026-69446
Incorrect authorization in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally
4.4
Medium
CVE-2026-88078
Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to…
4.3
Medium
CVE-2026-88077
Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate…
8.8
High
CVE-2026-96196
Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a…
8.8
High