CVE-2026-66312: Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
Buffer over-read in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
Details
Original advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-66312
Referenced CVEs
| CVE | CSIRTS overview | External |
|---|---|---|
| CVE-2026-66312 | coverage & exploitation status | NVD · CVE.org |
Same CVEs, other sources
How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.
Recent advisories for Buffer over-read in
A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.
- mediumCVE-2026-55970: Buffer Over-read vulnerability in Apache Thrift C++ bindings. This issue affects Apache Thrift…nvd · 2026-07-27
- mediumCVE-2026-66337: A flaw was found in libsoup. An unsigned integer underflow in the soup_filter_input_stream_rea…nvd · 2026-07-24
- unknownCVE-2026-9499: An out-of-bounds read (buffer over-read) vulnerability exists in QTextCodec::codecForName() in …nvd · 2026-07-21
- mediumCVE-2026-15712: A heap buffer over-read vulnerability was discovered in libsoup's (versions: libsoup 3.0 to 3.…nvd · 2026-07-14
- highCVE-2026-57968: Buffer over-read in Windows Subsystem for Linux allows an authorized attacker to elevate privi…nvd · 2026-07-14
- highCVE-2026-55036: Buffer over-read in Microsoft Office Excel allows an unauthorized attacker to execute code loc…nvd · 2026-07-14
More from NVD Recent CVEs
- mediumCVE-2026-8508: An improper authentication vulnerability in the "social_login.cgi" CGI program in Zyxel WAX650S…2026-08-04
- highCVE-2026-6837: A post-authentication command injection vulnerability in the "export-cgi" CGI program in Zyxel …2026-08-04
- mediumCVE-2026-18720: A flaw has been found in kalcaddle kodbox 1.67 Build 02. This vulnerability affects unknown co…2026-08-04
- mediumCVE-2026-17614: A path traversal flaw was found in WildFly's domain mode implementation. The LocalFileReposito…2026-08-04
- mediumCVE-2026-18719: A vulnerability was detected in cemtan sar2html 4.0.0. This affects an unknown part of the fil…2026-08-04