May 2026: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
CVE-2026-45495 Published on May 18, 2026
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Weakness Types
What is a Code Injection Vulnerability?
The software constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.
CVE-2026-45495 has been classified to as a Code Injection vulnerability or weakness.
What is a Buffer Overflow Vulnerability?
The software performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.
CVE-2026-45495 has been classified to as a Buffer Overflow vulnerability or weakness.
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Products Associated with CVE-2026-45495
Want to know whenever a new CVE is published for Microsoft Edge Chromium? stack.watch will email you.
Affected Versions
Microsoft Edge (Chromium-based):- Version 1.0.0.0 and below 148.0.3967.70 is affected.