{"data":{"id":"595cfa72-246a-4a15-95b3-3581ecedfc31","title":"CVE-2026-58616: Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft E","summary":"A race condition (a bug where two processes access the same resource at the same time, causing unpredictable behavior) exists in Microsoft Edge's Copilot Chat feature that allows an authorized attacker to leak sensitive information over a network.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-58616","publishedAt":"2026-08-28T20:18:44.927Z","cveId":"CVE-2026-58616","cweIds":["CWE-362"],"cvssScore":"4.4","cvssSeverity":"medium","severity":"medium","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedVendors":["Microsoft"],"affectedVendorsRaw":["Microsoft Copilot Chat","Microsoft Edge"],"classifierModel":"claude-haiku-4-5-20251001","classifierPromptVersion":"v3","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N","attackVector":"network","attackComplexity":"high","privilegesRequired":"low","userInteraction":"required","exploitMaturity":"unknown","epssScore":0,"patchAvailable":null,"disclosureDate":"2026-08-28T20:18:44.927Z","capecIds":["CAPEC-26","CAPEC-29"],"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"api","llmSpecific":true,"classifierConfidence":0.85,"researchCategory":null,"atlasIds":null}}