Executive brief
Microsoft Edge is a web browser used by millions of users to access online content and services. A race condition flaw allows a network attacker to bypass security checks and disclose sensitive information, potentially exposing user data without requiring any special privileges or user interaction.
Technical details
A time-of-check time-of-use (TOCTOU) race condition exists in Microsoft Edge (Chromium-based) that enables an attacker to disclose information over the network. The vulnerability arises from a gap between a security check and its use, allowing an attacker to modify state between these two operations. An unauthorized attacker can exploit this flaw via a network vector without authentication. The vulnerability permits information disclosure and potentially other impacts through careful timing of malicious requests.
Affected products
- Microsoft Edge <UNKNOWN>
Timeline
- 2026-08-04: disclosed