Vulnerability intelligence
CVE-2026-55945
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to disclose information locally.
CVSS Score
4.2
Medium
EPSS — Exploit Probability
0.2%
Riskier than 8% of all CVEs · checked 2026-09-16
Exploitation
Not in CISA KEV
KEV does not include every exploited vulnerability
Remediation
Patch available
Vendor fix published
1 article across 1 outlet · first covered Sep 16, 2026 · latest Sep 16, 2026
Coverage timeline
-
Browser Extensions Hijacked Chrome and Edge AI Assistants in BragJack Attackswww.darkreading.com · Sep 16, 2026