A memory corruption vulnerability in Microsoft Edge (Chromium-based) could allow an unauthenticated attacker to achieve remote code execution.

This vulnerability is a Use-After-Free (CWE-416) flaw that occurs when the application improperly manages memory after it has been freed. An unauthenticated attacker could trigger this condition to execute malicious code via a specially crafted network interaction.

The successful exploitation of this vulnerability poses a severe risk to organizational security, potentially leading to full system compromise, data exfiltration, or the installation of persistent malware. With a CVSS score of 7.5, the vulnerability is classified as High; it represents a significant threat to endpoint integrity and the confidentiality of sensitive user information processed within the browser environment.

Immediate Action: Update Microsoft Edge to version 150.0.4078.48 or later immediately to resolve the underlying memory management defect.

Proactive Monitoring: Review endpoint security logs for anomalous crash patterns or unexpected process spawns originating from the web browser.

Compensating Controls: Utilize endpoint protection platforms (EPP) and browser-based security policies to restrict the execution of untrusted scripts or malicious web content.

Public Exploit Available: false

The severity of this memory corruption flaw requires immediate attention to prevent potential remote code execution. Security teams should prioritize deploying the latest Microsoft Edge updates across all managed workstations to eliminate the vulnerability.