Microsoft Edge For Linux
Monthly
Use-after-free memory corruption in Microsoft Edge (Chromium-based) can let remote attackers execute arbitrary code in the browser process after the victim renders attacker-controlled web content in an unpatched build prior to 152.0.4191.52. All supported platforms are in scope - desktop Chromium-based Edge plus Edge for Android, iOS, Linux, and macOS - so the affected install base is broad even though the observed risk signal is currently low. Microsoft rates this 8.8 with a PR:L/UI:N vector while the independent assessment treats it as unauthenticated remote code execution that requires a targeted user to open or render a malicious or compromised page (PR:N/UI:R); no public exploit code has been identified and CISA's SSVC records exploitation as none, with EPSS at only 0.62% (48th percentile).
Use-after-free memory corruption in Microsoft Edge (Chromium-based) can let remote attackers execute arbitrary code in the browser process after the victim renders attacker-controlled web content in an unpatched build prior to 152.0.4191.52. All supported platforms are in scope - desktop Chromium-based Edge plus Edge for Android, iOS, Linux, and macOS - so the affected install base is broad even though the observed risk signal is currently low. Microsoft rates this 8.8 with a PR:L/UI:N vector while the independent assessment treats it as unauthenticated remote code execution that requires a targeted user to open or render a malicious or compromised page (PR:N/UI:R); no public exploit code has been identified and CISA's SSVC records exploitation as none, with EPSS at only 0.62% (48th percentile).