CVE-2026-58616: microsoft edge_chromium Race Condition

Vulnerability summary

CVE-2026-58616 is a medium (CVSS 4.4) Race Condition vulnerability in microsoft edge_chromium. EPSS estimates a 0.29% chance of exploitation in the next 30 days, higher than 20.7% of scored vulnerabilities.

Timeline

1. 28-08-2026
   PublishedVulnerability first disclosed.
2. 08-10-2026
   Last modifiedVulnerability information updated.

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to disclose information over a network.

• CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.