CVE-2026-66798
published 2026-08-28CVE-2026-66798: Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
PriorityP428medium4.3CVSS 3.1
AVNACLPRNUIRSUCNINAL
EPSS
0.79%
55.6th percentile
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | edge_chromium | < 152.0.4191.53 | 152.0.4191.53 |
| microsoft | microsoft_edge | — | — |
| microsoft | microsoft_edge_for_android | >= 1.0.0.0 < 152.0.4191.52 | 152.0.4191.52 |
| microsoft | microsoft_edge_for_ios | >= 1.0.0.0 < 152.0.4191.52 | 152.0.4191.52 |
| microsoft | microsoft_edge_for_linux | >= 1.0.0 < 152.0.4191.52 | 152.0.4191.52 |
| microsoft | microsoft_edge_for_mac | >= 1.0.0.0 < 152.0.4191.52 | 152.0.4191.52 |
| microsoft | microsoft_edge_for_windows | >= 1.0.0.0 < 152.0.4191.52 | 152.0.4191.52 |
| rhacm2 | cluster-backup-rhel9-operator | — | — |
CVSS provenance
nvdv3.14.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
vendor_redhat8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
cluster-backup-operator: cluster-backup-operator: Restore.spec.hooks passed verbatim to Velero Restore — arbitrary command execution in restored pods
vendor_redhat·2026-08-11·CVSS 8.8
CVE-2026-66798 [HIGH] CWE-77 cluster-backup-operator: cluster-backup-operator: Restore.spec.hooks passed verbatim to Velero Restore — arbitrary command execution in restored pods
cluster-backup-operator: cluster-backup-operator: Restore.spec.hooks passed verbatim to Velero Restore — arbitrary command execution in restored pods
A flaw was found in cluster-backup-operator. A namespace administrator in open-cluster-management-backup can create a Restore Custom Resource (CR) with malicious hooks. These hooks allow the execution of arbitrary commands within any matching restored pod, leading to the exfiltration of ServiceAccount tokens. This bypasses normal access controls, granting the attacker unauthorized execution access to pods and their associated Service Accounts.
Statement: This vulnerability is rated Important as a namespace-admin in the `open-cluster-management-backup` namespace within Red Hat Advanced Cluster Management for Kubernetes can execute arbitrary
GHSA
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
ghsa_unreviewed·2026-08-28
CVE-2026-66798 [MEDIUM] CWE-416 Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
No detection rules found.
No public exploits indexed.
2026-08-28
Published