Microsoft Edge Vulnerability Allows Remote Attacker to Execute Arbitrary Code

Microsoft disclosed CVE-2026-57992, a Use-After-Free vulnerability in Microsoft Edge's Chromium engine (CVSS 7.5) that could allow remote arbitrary code execution if a user visits a malicious webpage and performs two tap gestures that trigger the browser's autofill; no patch or public proof-of-concept is currently available. Mitigations recommended include monitoring MSRC for updates, restricting autofill in enterprise environments, enabling browser security features, and user education.