CVE-2026-55945
published 2026-07-03CVE-2026-55945: Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to…
PriorityP419medium4.2CVSS 3.1
AVLACHPRLUINSCCLILAN
EPSS
0.19%
7.8th percentile
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to disclose information locally.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | edge_chromium | < 150.0.4078.48 | 150.0.4078.48 |
| microsoft | microsoft_edge | >= 1.0.0.0 < 150.0.4078.48 | 150.0.4078.48 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Microsoft Edge up to 149.0.4022.68 race condition (EUVD-2026-41645 / WID-SEC-2026-2200)
vuldb·2026-07-12·CVSS 4.2
CVE-2026-55945 [MEDIUM] Microsoft Edge up to 149.0.4022.68 race condition (EUVD-2026-41645 / WID-SEC-2026-2200)
A vulnerability, which was classified as problematic, was found in Microsoft Edge. Affected is an unknown function. Executing a manipulation can lead to race condition.
This vulnerability is registered as CVE-2026-55945. The attack needs to be launched locally. No exploit is available.
You should upgrade the affected component.
GHSA
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to disclose information locally.
ghsa_unreviewed·2026-07-03
CVE-2026-55945 [MEDIUM] CWE-362 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to disclose information locally.
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to disclose information locally.
No detection rules found.
No public exploits indexed.
Hackernews
One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude
blogs_hackernews·2026-09-16
CVE-2026-0628 One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude
Home
Threat Intelligence
Vulnerabilities
Cyber Attacks
Webinars
Expert Insights
Awards
Webinars
Awards
Free eBooks
About THN
Jobs
Advertise with us
## One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude
Security researchers at Forever Security have shown that one ordinary browser extension could take control of the AI assistants built into five Chromium-based products: Gemini Live in Chrome, Perplexity Comet, Microsoft Edge, Opera Neon and the Claude in Chrome extension.
Once the extension was installed, it could access each product's built-in AI with a single click. On Comet, Edge, Opera Neon, and Claude in Chrome, it could drive the AI agent to act on behalf of the attacker; on Chrome and Comet, it could read files from the user's c
Sans Isc
Microsoft Patch Tuesday July 2026 - The AI Acopolypse is Here , (Tue, Jul 14th)
blogs_sans_isc·2026-07-14·CVSS 6.1
CVE-2026-56155 [MEDIUM] Microsoft Patch Tuesday July 2026 - The AI Acopolypse is Here , (Tue, Jul 14th)
Microsoft Patch Tuesday July 2026 - The AI Acopolypse is Here
Published: 2026-07-14. Last Updated: 2026-07-14 19:14:58 UTC
by Johannes Ullrich (Version: 1)
0 comment(s)
This patch Tuesday includes a staggering 622 vulnerabilities, not including another 427 vulnerabilities in Chromium, affecting Microsoft's Edge browser. 62 of the vulnerabilities are rated critical. One was disclosed before today, and two have already been exploited.
Given the large number of vulnerabilities, it is difficult to point out "noteworthy" issues.
Already exploited vulnerabilities:
CVE-2026-56155 : Active Directory Federation Services Elevation of Privilege Vulnerability. This is an important (not critical) vulnerablity.
CVE-2026-56164: Microsoft SharePoint Server Elevation of Privilege Vulnerability. Micr
2026-07-03
Published