CVE-2026-56646

CVE-2026-56646 affects Microsoft Edge (Chromium-based). The vulnerability exposes sensitive information to an unauthorized actor, enabling network-based spoofing. CVSSv3.1: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N; base score 6.5 (Medium). Connected sources show the impact as spoofing via network; no ...

CVE-2026-57987

CVE-2026-57987 describes a server-side request forgery (SSRF) in Microsoft Edge (Chromium-based) that enables spoofing over a network. According to the connected sources, the vulnerability affects Edge and has a CVSS v3.1 base score of 6.5 (MEDIUM) with Network attack vector, low attack complexit...

CVE-2026-58294

The CVE-2026-58294 entry refers to a Use After Free vulnerability in Microsoft Edge (Chromium-based). The issue affects Edge’s Chromium engine and enables a remote attacker to execute code over a network. Documented impact is high (CVSSv3.1: 7.5), with attack vector NETWORK, user interaction REQU...

CVE-2026-33118

CVE-2026-33118 is a vulnerability in Microsoft Edge (Chromium-based) classified as a spoofing issue. The CVSS v3.1 base score is 4.3 (MEDIUM) with attack vector: NETWORK , attack complexity: LOW , and user interaction: REQUIRED . The impact is limited to confidentiality: LOW ; integrity: NONE ; a...

CVE-2026-57977

Summary : CVE-2026-57977 affects Microsoft Edge (Chromium-based). The issue is an improper neutralization of input during web page generation (XSS), enabling an unauthorized attacker to perform spoofing over a network. According to the provided metrics, the exploit has a CVSSv3.1 base score of 7....

CVE-2026-57985

CVE-2026-57985 involves Microsoft Edge (Chromium-based) and is tied to an issue of improper input validation. The description indicates an unauthorized attacker could achieve remote code execution over a network, requiring user interaction despite a network-based attack vector. CVSS 3.1 metrics (...

CVE-2026-58522

CVE-2026-58522 pertains to Microsoft Edge for Android and describes a relative path traversal that could allow an unauthorized local disclosure of information. The NVD/CVE records label the flaw as a Relative path traversal in Edge for Android, enabling local information disclosure. The CVSS 3.1 ...

CVE-2026-45492

Microsoft Edge (Chromium-based) contains a security feature bypass (CVE-2026-45492) due to improper input validation. The issue is exploitable over a network by an unauthenticated attacker to bypass a security feature in Edge. Connected sources identify the affected product as Edge (Chromium-base...

CVE-2026-58597

Microsoft Edge (Chromium-based) is affected by CVE-2026-58597 due to insufficient UI warning for dangerous operations, enabling a network-based spoofing scenario. The connected records describe the issue as a UI warning insufficiency without detailing affected components, versions, or patches. Th...

CVE-2026-45494

Technical details for CVE-2026-45494 are not publicly provided in the supplied documents. Monitor for updates from NVD and Microsoft MSRC.

CVE-2026-57993

CVE-2026-57993 describes a server-side request forgery in Microsoft Edge (Chromium-based) that enables an unauthorized attacker to perform network spoofing. The vulnerability affects Edge components used for handling requests; the root cause and exact exploitable paths are not detailed in the pro...

CVE-2026-58283

Microsoft Edge (Chromium-based) is affected by CVE-2026-58283 due to a resource access vulnerability described as a type confusion issue. The underlying problem could allow an unauthenticated attacker to perform network-based spoofing. The NVD entry summarizes the impact as spoofing with a CVSSv3...

CVE-2026-58299

CVE-2026-58299 affects Microsoft Edge for Android. The issue is a time-of-check time-of-use (TOCTOU) race condition that could allow a network-based attacker to execute code remotely. This is documented with a CVSS v3.1 base score of 7.5 (HIGH) and network attack vector, requiring no privileges b...

CVE-2026-58296

CVE-2026-58296 affects Microsoft Edge for Android. The vulnerability is an information disclosure that allows an unauthenticated attacker to disclose private user information over a network. CVSS 3.1 base score 7.1 (HIGH); attack vector NETWORK; user interaction REQUIRED; no privileges required; ...

CVE-2026-45489

Technical details for CVE-2026-45489 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-57975

Microsoft Edge (Chromium-based) is affected by CVE-2026-57975 due to a type confusion when accessing a resource with an incompatible type. This allows remote code execution over the network by an unauthenticated attacker. CVSS 3.1 base score is 7.5 (HIGH) with HIGH impact to confidentiality, inte...

CVE-2026-58281

CVE-2026-58281 — Microsoft Edge (Chromium-based) Root cause: Deserialization of untrusted data in Edge may allow remote code execution. The vulnerability is exploitable over a network and falls under a high severity (CVSS v3.1 base score 8.3; AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H). Impact: Unauthor...

CVE-2026-58282

Technical details are not publicly available in the provided documents. Monitor for updates and official mitigations when released.

CVE-2026-0391

CVE-2026-0391 describes a user-interface misrepresentation in Microsoft Edge (Chromium-based) for Android that could allow an attacker to spoof information over a network. The vulnerability affects Microsoft Edge for Android, with the issue framed as a UI spoofing flaw rather than a network-explo...

CVE-2026-40416

CVE-2026-40416 affects Microsoft Edge (Chromium-based) for Android. The vulnerability is a UI misrepresentation that allows an unauthorized attacker to spoof information over the network, potentially misleading users. Affected component is the Edge browser on Android; root cause is misleading UI ...

CVE-2026-42891

CVE-2026-42891 affects Microsoft Edge (Chromium-based) for Android . The issue is a UI misrepresentation that can enable an attacker to perform a spoofing action over a network. Documented impact includes spoofing user interface with potential exposure of sensitive information, aligned with the C...