CVE-2026-58289 and is rated High severity with a CVSS score of 8.3. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
Exploit-DB lists a public exploit or proof of concept for this CVE. SecurityAlert has not executed it; this is not evidence of attacks against your systems.
What to do next
Remediation and response
Microsoft Security Response Center guidance
Vendor revision: Jul 3, 2026
Release Notes
Vendor-listed releases
150.0.4078.48
CISA KEVNot listedBased on the latest collected catalog
EPSS2.0%Estimated 30-day exploitation probability
Ransomware useNot markedCISA KEV ransomware field
Threat actors0Source-linked actor relationships
Overview
What is CVE-2026-58289?
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.