CVE-2026-45495
published 2026-05-18CVE-2026-45495: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
PriorityP268critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
0.99%
58.3th percentile
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | edge_chromium | < 148.0.3967.70 | 148.0.3967.70 |
| microsoft | microsoft_edge | >= 1.0.0.0 < 148.0.3967.70 | 148.0.3967.70 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Microsoft Edge up to 148.0.3967.55 input validation
vuldb·2026-05-18·CVSS 8.8
CVE-2026-45495 [HIGH] Microsoft Edge up to 148.0.3967.55 input validation
A vulnerability was found in Microsoft Edge. It has been rated as critical. This impacts an unknown function. This manipulation causes improper input validation.
This vulnerability appears as CVE-2026-45495. The attack may be initiated remotely. There is no available exploit.
Upgrading the affected component is advised.
GHSA
GHSA-52mp-27cf-fhvh: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
ghsa_unreviewed·2026-05-18
CVE-2026-45495 [HIGH] CWE-20 GHSA-52mp-27cf-fhvh: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
No detection rules found.
No public exploits indexed.
2026-05-18
Published