CVE-2026-88090 — Vulnerability intelligence

microsoft — edge chromium

Published: 2026-10-29T16:19:54.280

CVSS

5.4

CISA KEV

Not listed; not proof of no exploitation

Original source text (not a translation)

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

Sources

• CVE-2026-88090
• Patch, Vendor Advisory