CVE-2026-88090
Medium · 5.4CVSS
5.4
EPSS
0.3%
Published
Oct 29, 2026
CISA due date
—
The record
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-119086 Missing queue-set type validation in the queue-set selection system call in… CWE-843
- CVE-2026-96187 Access of resource using incompatible type ('type confusion') in Microsoft Edge… CWE-843
- CVE-2026-118510 A type-handling flaw in the relationship query building of this MongoDB integration… CWE-843
- CVE-2026-62765 Access of resource using incompatible type ('type confusion') in Microsoft Edge… CWE-843
- CVE-2026-85898 Access of resource using incompatible type ('type confusion') in Microsoft Edge… CWE-843
- CVE-2026-114598 In EPICS Base release 7.0.10 and prior, an insufficient validation of element or length… CWE-843
- CVE-2026-112659 A type confusion issue was addressed with improved memory handling. CWE-843
- CVE-2026-112547 A type confusion issue was addressed with improved checks. CWE-843