5.4
Medium
CVE-2026-66323 Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized…
Description
Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Edge (Chromium-based) 1.0 | 1.0.0.0 → < 152.0.4191.53 | 152.0.4191.53 |
| Microsoft Edge for Android 1.0 | 1.0.0.0 → < 152.0.4191.52 | 152.0.4191.52 |
| Microsoft Edge for iOS 1.0 | 1.0.0.0 → < 152.0.4191.52 | 152.0.4191.52 |
| Microsoft Edge for Linux 1.0 | 1.0.0 → < 152.0.4191.52 | 152.0.4191.52 |
| Microsoft Edge for MAC 1.0 | 1.0.0.0 → < 152.0.4191.52 | 152.0.4191.52 |
| Microsoft Edge for Windows 1.0 | 1.0.0.0 → < 152.0.4191.52 | 152.0.4191.52 |
References
- Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Edge (Chromium-based)
The 301 CVEs of Microsoft Edge (Chromium-based) →
CVE-2026-69446
Incorrect authorization in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally
4.4
Medium
CVE-2026-88078
Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to…
4.3
Medium
CVE-2026-88077
Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate…
8.8
High
CVE-2026-96196
Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a…
8.8
High