Microsoft Security Response Center guidance
Release Notes
Vendor-listed releases
- 152.0.4191.66
Vulnerability intelligence
CVE-2026-85892 and is rated High severity with a CVSS score of 7.8. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
Release Notes
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.