Edge: type confusion allows unauthorized remote code execution

high severity ยท published 2026-10-27

A type confusion (access of a resource using an incompatible type) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network. Microsoft fixed it in version 149.0.4022.62.

Fixed in: 149.0.4022.62

CVE: CVE-2026-62765

Source: NVD

Get the fix

Fixlane has a reviewed fix procedure for this incident: a read-only check first, then the fix. Ask the Telegram bot, or connect an AI agent to the Fixlane MCP server and call get_fix_prompt with incident id 560 and your operating system.