CVE-2026-45495
CRITICAL WAF: Medium
CVSS 9.8
Published: 2026-05-18
CWE-20 CWE-94
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
WAF Coverage Analysis
Improper Input Validation
Medium WAF Coverage
OWASP: A03:2021 Injection
920xxx - Protocol Enforcement 941xxx - XSS / XXE 942xxx - SQL Injection
Code Injection
Medium WAF Coverage
OWASP: A03:2021 Injection
932xxx - Remote Code Execution 933xxx - PHP Injection 934xxx - Node.js / Generic Injection
Affected Software
| Vendor | Product | Version |
|---|---|---|
| microsoft | edge_chromium | up to 148.0.3967.70 |
References
- msrc.microsoft.com (Vendor Advisory)