CVE-2026-69486 - Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

HIGH

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Published Sep 15, 2026

8.8

HIGH

CVSS 3.1

EPSS 0.82%

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
1.0.0.0	affected	<153.0.4234.32

No remediation recorded yet.

Weaknesses (1)

CWE-122

Link	Providers	Tags
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69486		vendor-advisorypatch

No recorded changes yet.

Sources

Status PUBLISHED

Assigner microsoft

Published Sep 15, 2026

Updated Oct 1, 2026

Reserved Aug 3, 2026

Updated Sep 16, 2026

Status Analyzed

Modified Sep 25, 2026

Severity n/a

Public date n/a