CVE-2026-58616CWE-362

CVE-2026-58616

Medium · published August 29, 2026

CVSS v3.1
4.4
EPSS
0%
Percentile
21.0
In the wild
Unconfirmed
What it is

Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to disclose information over a network.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00295 · 21.0th percentile
Weakness
CWE-362 · Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
Published
2026-08-29T00:18Z
Affected products (1)
ProductVersionsFixed in
microsoft/edge_chromium< 152.0.4191.53152.0.4191.53
References (1)
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58616 · [email protected]
EPSS history
Timeline
  • 30 AUG 16:18Z
    EPSS moved — → 0%
    epss
  • 28 AUG 17:43Z
    Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability
    cvelistv5