CVE-2026-85892: Microsoft Edge Chromium

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.

Affected products

• Microsoft Edge Chromium: before 152.0.4191.66 (fixed in 152.0.4191.66)

Published 2026-09-14. Last modified 2026-09-25.