5.4
Moyenne
CVE-2026-42838 Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Edge…
Description
Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Microsoft Edge (Chromium-based) 1.0 | 1.0.0.0 → < 148.0.3967.55 | 148.0.3967.55 |
Références
- Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability msrc.microsoft.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Microsoft Edge (Chromium-based)
Les 301 CVE de Microsoft Edge (Chromium-based) →
CVE-2026-69446
Incorrect authorization in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally
4.4
Moyenne
CVE-2026-88078
Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to…
4.3
Moyenne
CVE-2026-88077
Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate…
8.8
Élevée
CVE-2026-96196
Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a…
8.8
Élevée