Cyber Resilience

CVE-2026-58299

High

Published: 03 July 2026

Published
03 July 2026
Modified
03 July 2026
KEV Added
—
Patch
—
CVSS Score v3.1 7.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score N/A
Risk Priority 55 floored blend · peak EPSS

Summary

CVE-2026-58299 is a high-severity Time-of-check Time-of-use (TOCTOU) Race Condition (CWE-367) vulnerability. Its CVSS base score is 7.5 (High).

Operationally, it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability details

Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthorized attacker to execute code over a network.

CWE(s)
CWE-367

Related Threats

CVEs Like This One

CVE-2022-25165Shared CWE-367
CVE-2024-49046Shared CWE-367
CVE-2021-42835Shared CWE-367
CVE-2022-31638Shared CWE-367
CVE-2022-31639Shared CWE-367
CVE-2022-23029Shared CWE-367
CVE-2022-31642Shared CWE-367
CVE-2025-21431Shared CWE-367
CVE-2026-41651Shared CWE-367
CVE-2024-53032Shared CWE-367

Affected Assets

Mitigating Controls

Likely Mitigating Controls AI

Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.

AU-8 Time Stamps
addresses: CWE-367

Timestamps meeting UTC or offset standards help identify TOCTOU issues through precise chronological reconstruction of check/use operations.

References