CVE-2026-58597

Microsoft Edge (Chromium-based) is affected by CVE-2026-58597 due to insufficient UI warning for dangerous operations, enabling a network-based spoofing scenario. The connected records describe the issue as a UI warning insufficiency without detailing affected components, versions, or patches. Th...

CVE-2026-58298

Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-58298 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2026-58300 Microsoft Edge for Android Information Disclosure Vulnerability

...

EUVD-2026-41595

Absolute path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally...

CVE-2026-58300

CVE-2026-58300 describes an absolute path traversal vulnerability in Microsoft Edge for Android that could allow an unauthorized local attacker to disclose information. Core details from connected sources confirm the impact is local information disclosure; CVSS v3.1 base score 6.2 (Medium) with h...

CVE-2026-58298

CVE-2026-58298 affects Microsoft Edge (Chromium-based). The issue is improper neutralization of input during web page generation, enabling cross-site scripting that can be leveraged by an unauthenticated attacker over the network to perform spoofing. CVSS 3.1 base score 7.2 (HIGH) with network ac...

CVE-2026-58297 Microsoft Edge for Android Information Disclosure Vulnerability

...

CVE-2026-58296 Microsoft Edge for Android Information Disclosure Vulnerability

...

EUVD-2026-41592

Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network...

CVE-2026-58297

CVE-2026-58297 affects Microsoft Edge for Android. The issue is an information disclosure that allows an unauthorized attacker to exfiltrate private personal information over a network. According to the sources, the CVSS v3.1 base score is 7.1 (HIGH) with network attack vector, no privileges requ...

CVE-2026-58295

Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to bypass a security feature over a network...

EUVD-2026-41591

Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to bypass a security feature over a network...

CVE-2026-58295

CVE-2026-58295 affects Microsoft Edge (Chromium-based). A resource access type confusion allows a network-based attacker to bypass a security feature without user interaction (CVSS v3.1: 8.3). No exploitation details are provided beyond MSRC reference; remediation is to apply the appropriate Edge...

CVE-2026-58294

Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-58294 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

EUVD-2026-41590

Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-58294

The CVE-2026-58294 entry refers to a Use After Free vulnerability in Microsoft Edge (Chromium-based). The issue affects Edge’s Chromium engine and enables a remote attacker to execute code over a network. Documented impact is high (CVSSv3.1: 7.5), with attack vector NETWORK, user interaction REQU...

CVE-2026-58293

CVE-2026-58293 affects Microsoft Edge (Chromium-based). It describes external control of a file name or path that allows an unauthenticated attacker to execute code over the network. The CVSSv3.1 base score is 8.1 (High) with attack vector Network, attack complexity High, privileges required None...

CVE-2026-58290

Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...