Jan 2026: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
CVE-2026-21223 Published on January 16, 2026
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Improper privilege management in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass a security feature locally.
Vulnerability Analysis
CVE-2026-21223 can be exploited with local system access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality and integrity, and no impact on availability.
Weakness Type
Improper Privilege Management
The software does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
Products Associated with CVE-2026-21223
Want to know whenever a new CVE is published for Microsoft Edge Chromium? stack.watch will email you.
Affected Versions
Microsoft Edge (Chromium-based):- Version 1.0.0.0 and below 144.0.3719.82 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.