CVE-2026-55945

Medium4.2Published on July 3, 2026

Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to disclose information locally.

CVSS score4.2 / 10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:N

Weakness type (CWE)CWE-362

Vendorsmicrosoft

Affected products

Vendors	Product	Versions
microsoft	edge chromium	< 150.0.4078.48

BragJack Turns Browser Extensions Into Control Channels for AI Agents

BragJack shows how a malicious Chrome extension can hijack Gemini, Comet, Edge, Opera and Claude AI agents to steal files and take actions.

Sep 19, 202623:377 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

Affected products

Related articles

BragJack Turns Browser Extensions Into Control Channels for AI Agents