Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-09 | 1 | General1 |
| 2026-05-13 | 1 | Patch1 |
XSS2RCE in Edge + Microsoft Store (2022). Forgotten Web APIs enabled RCE on any signed-in device; all now retired. https://jinmo.github.io/blog/2026/05/10/cve-2022-33649-entrypoint-to-push-to-install.html https://t.co/LiMwuA3Cuc
Post summary
The blog post announces that the XSS2RCE vulnerability affecting Edge and Microsoft Store has been mitigated by retiring the responsible Web APIs, making the issue no longer exploitable.
I’ll share the story behind CVE-2022-33649 in a few days before I forget…🤔 an interesting bug and methodology
Post summary
The author plans to discuss CVE-2022-33649 soon but provides no technical or exploit details in this excerpt.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | microsoft | edge_chromium | - | - | - |