- Description
- Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to disclose information locally.
- Source
- secure@microsoft.com
- NVD status
- Analyzed
- Products
- edge_chromium
CVSS 3.1
- Type
- Secondary
- Base score
- 4.2
- Impact score
- 2.7
- Exploitability score
- 1.1
- Vector string
- CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N
- Severity
- MEDIUM
- secure@microsoft.com
- CWE-362
- Hype score
- Not currently trending
π ππππ Β· ππΆππ°ππππΆπΌπ» π’ Target: ππΌπΌπ΄πΉπ², π πΆπ°πΏπΌππΌπ³π, π£π²πΏπ½πΉπ²π πΆππ 𧩠Products: ππΌπΌπ΄πΉπ² ππ΅πΏπΌπΊπ², π πΆπ°πΏπΌππΌ
@intels_daily
21 Sept 2026
119 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
π¨ AI SECURITY ALERT DISCLOSED BY: Forever Security PRODUCTS: Google Chrome / Gemini Live Microsoft Edge Perplexity Comet Opera Neon Claude in Chrome CVEs: CVE-2026-0628 β Chrome CVE-2026-55945 β Microsoft Edge IMPACT: A malicious browser extension can abuse trusted
@Python_s_
21 Sept 2026
86 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
BragJack: one unvetted browser extension hijacked the built-in AI agents in Chrome, Edge, Opera Neon, Comet and Claude in Chrome. No prompt injection needed, it crossed straight into the agent's privileged channel. CVE-2026-0628 and CVE-2026-55945 patched. #InfoSec #AISecurity
@infrasecserv
19 Sept 2026
38 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
BragJack: one ordinary extension commanded Claude in Chrome, Gemini Live, Edge, Comet, and Opera Neon. Forever Security took over the page the agent body already trusts, then sent it orders. Chrome got CVE-2026-0628. Edge got CVE-2026-55945. Comet, Neon, and Claude in Chrome
@ethereaglehq
16 Sept 2026
44 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
"matchCriteriaId": "0C006CA1-F693-4B52-BC1A-A7B44979EAB8",
"versionEndExcluding": "150.0.4078.48",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]