CVE intelligence

CVE-2026-58289

Vulnerability intelligence

Published Jul 3, 2026Sources checked Sep 28, 2026

8.3HIGHCVSS out of 10

What this means

Review the available evidence

CVE-2026-58289 and is rated High severity with a CVSS score of 8.3. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.

Public exploit: Cataloged public exploit.

Exploit-DB: Microsoft Edge 150.0.4078.48 - RCE (2026-09-23 21:40:27.335989+00)

CISA KEVNot listedBased on the latest collected catalog

EPSS2.0%Estimated 30-day exploitation probability

Ransomware useNot markedCISA KEV ransomware field

Threat actors0Source-linked actor relationships

Overview

What is CVE-2026-58289?

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.