CVE-2026-55945

MediumCVSS 4.2/10Last modified Oct 25, 2026

Description

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to disclose information locally.

Metrics

CVSS 3.1 4.2/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-362

Affected software

No affected versions have been published.

Timeline

Published: Jul 3, 2026
Last modified: Oct 25, 2026
NVD status: Analyzed

Related CVEs from 2026

CVE-2026-559465.9Ai command injection in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.CVE-2026-559477.8Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2026-559487.8Use after free in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2026-559497.8Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to execute code locally.CVE-2026-55956.3A security vulnerability has been detected in griptape-ai griptape 0.19.4. Affected by this vulnerability is the function load_files_from_di CVE-2026-559505.9Time-of-check Time-of-use (TOCTOU) race condition vulnerability in Erlang/OTP ssl (dtls_packet_demux module) allows an unauthenticated remot CVE-2026-559518.2The Erlang/OTP httpc HTTP client does not enforce a limit on the total size of response headers received from a server. The max_header_size CVE-2026-559527.5The Erlang/OTP ssl application does not validate that the PSK identity list and binder list carried in a TLS 1.3 ClientHello pre-shared key CVE-2026-559537.4The Erlang/OTP ssl TLS 1.2 (and earlier) and DTLS client does not verify that the cipher suite selected by the server in ServerHello was amo CVE-2026-559549.1Authentication Bypass by Spoofing vulnerability in ueberauth ueberauth_apple allows account takeover via unvalidated ID token claims. The U CVE-2026-559556.5Improper Authentication vulnerability in Apache Tomcat allowed a replay attack against the EncryptionInterceptor in the cluster component. CVE-2026-559566.5Improper Authorization vulnerability in Apache Tomcat leads to security constraints specified for the default servlet ignoring any method or