<< Back
CVE Number Vulnerability Product Severity Date
CVE-2026-21223 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Microsoft Edge Low 05-02-2026

Technical Information

A standard (non-admin) user could trick the Edge Elevation Service into running commands with SYSTEM privileges due to privilege validation flaw in the COM interface exposed by the service.

Patch release date: Jan 13, 2026
Further information on this vulnerability is available at : CVE-2026-21223

Affected Software

Microsoft Edge (Chromium) < 144.0.3719.82