CVE-2026-66324 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2026-66324

CVE-2026-66324 is a spoofing vulnerability in Microsoft Edge (Chromium-based) caused by external control of a file name or path . An unauthorized network-based attacker with low complexity and no prior privileges , but requiring user interaction , can exploit this to perform spoofing. The CVSS 3....

CVE-2026-66323 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

EUVD-2026-67849

Improper neutralization of parameter/argument delimiters in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-66323 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-66323

Microsoft Edge (Chromium-based) is affected by an improper neutralization of parameter/argument delimiters vulnerability that allows an unauthorized attacker to achieve remote code execution over a network. The CVSS v3.1 score is 5.4 (Medium) , reflecting a network attack vector with low complexi...

CVE-2026-62904 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

...

EUVD-2026-67848

Incorrect authorization in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...

CVE-2026-62904 Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

...

CVE-2026-62904

CVE-2026-62904 is an information disclosure vulnerability in Microsoft Edge (Chromium-based) caused by incorrect authorization , allowing an unauthorized attacker to disclose information over a network. The CVSS 3.1 score is 5.4 (Medium) with a vector of AV:N/AC:L/PR:N/UI:R, meaning exploitation ...

CVE-2026-58616 Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability

...

EUVD-2026-67847

Concurrent execution using shared resource with improper synchronization 'race condition' in Copilot Chat Microsoft Edge allows an authorized attacker to disclose information over a network...

CVE-2026-58616 Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability

...

CVE-2026-58616

CVE-2026-58616 is a race condition (improper synchronization of a shared resource) in Copilot Chat within Microsoft Edge , rated CVSS 4.4 (Medium) . An authorized attacker with low privileges can trigger a network-based information disclosure , requiring user interaction and exhibiting changed sc...

CVE-2026-70331 Microsoft Edge for iOS Spoofing Vulnerability

...

EUVD-2026-67846

Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-70331

CVE-2026-70331 affects Microsoft Edge for iOS and involves an improper neutralization of input used for LLM prompting , allowing an unauthorized attacker to perform spoofing over a network . The vulnerability requires user interaction and no prior privileges , with low attack complexity over the ...

CVE-2026-70331 Microsoft Edge for iOS Spoofing Vulnerability

...

19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code

Cybersecurity researchers have discovered a cluster of 18 Google Chrome and one Microsoft Edge extensions that were published over the last six months and harbored wallet secret stealing and cryptocurrency draining capabilities. The extensions, per Socket security researcher Karlo Zanki, share...

Chromium: CVE-2026-79214 Improper input validation in Preload

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...