CVE-2026-45492: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Overview

Severity
N/A
Category
Edge - Chromium
Exploit Status
Not Exploited
Patch Tuesday
2026-May
Released
2026-05-15

FAQ

According to the CVSS metrics, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L), and integrity (I:L) but lead to no loss of availability (A:N). What is the impact of this vulnerability? An attacker who successfully exploited the vulnerability could view some sensitive information (Confidentiality), make changes to disclosed information (Integrity), but cannot limit access to the resource (Availability). What kind of security feature could be bypassed by successfully exploiting this vulnerability? An authenticated local attacker can disable or enable Windows VBS without administrative privileges, resulting in bypass of platform security hardening. This does not grant direct code execution as another user but weakens system security guarantees, enabling follow‑on attacks. What is the version information for this release? Microsoft Edge Version Date Released Based on Chromium Version 148.0.3967.70 05/15/2026 148.0.7778.168

Affected Products (1)

Browser

  • Microsoft Edge (Chromium-based)

Revision History

  • 2026-05-15: Information published.