CVE-2026-58295

CVE-2026-58295 affects Microsoft Edge (Chromium-based). A resource access type confusion allows a network-based attacker to bypass a security feature without user interaction (CVSS v3.1: 8.3). No exploitation details are provided beyond MSRC reference; remediation is to apply the appropriate Edge...

CVE-2026-57978

CVE-2026-57978 describes an origin validation error in Microsoft Edge (Chromium-based) that could enable an attacker to perform spoofing over a network. The entry’s metrics show a CVSS v3.1 base score of 5.4 (Medium) , with attack vector Network , required user interaction, and no availability im...

CVE-2026-58287

CVE-2026-58287 affects Microsoft Edge (Chromium-based). The vulnerability is a use-after-free in Edge that can lead to remote code execution over a network. CVSS v3.1 metrics indicate high impact (Confidentiality/Integrity/Availability), network attack vector, high attack complexity, no privilege...

CVE-2026-58291

CVE-2026-58291 affects Microsoft Edge (Chromium-based). The description indicates an information disclosure vulnerability where an attacker can disclose data by operating on a resource after expiration or release. CVSSv3.1 metrics cite Network attack, high complexity, no privileges required, user...

CVE-2026-41107

CVE-2026-41107 describes an information disclosure in Microsoft Edge (Chromium-based) caused by external control of a file name or path. The vulnerability affects Microsoft Edge for Android and the Chromium-based Edge on other platforms. The underlying issue enables an unauthorized attacker to di...

CVE-2026-58294

The CVE-2026-58294 entry refers to a Use After Free vulnerability in Microsoft Edge (Chromium-based). The issue affects Edge’s Chromium engine and enables a remote attacker to execute code over a network. Documented impact is high (CVSSv3.1: 7.5), with attack vector NETWORK, user interaction REQU...

CVE-2026-58524

Microsoft Edge (Chromium-based) has a cross-site scripting (XSS) vulnerability (CVE-2026-58524) due to improper input neutralization during web page generation, enabling spoofing over a network. The CVSS v3.1 base score is 5.4 (Medium) with network attack vector and user interaction required. Aff...

CVE-2026-58597

Microsoft Edge (Chromium-based) is affected by CVE-2026-58597 due to insufficient UI warning for dangerous operations, enabling a network-based spoofing scenario. The connected records describe the issue as a UI warning insufficiency without detailing affected components, versions, or patches. Th...

CVE-2026-57987

CVE-2026-57987 describes a server-side request forgery (SSRF) in Microsoft Edge (Chromium-based) that enables spoofing over a network. According to the connected sources, the vulnerability affects Edge and has a CVSS v3.1 base score of 6.5 (MEDIUM) with Network attack vector, low attack complexit...

CVE-2026-58300

CVE-2026-58300 describes an absolute path traversal vulnerability in Microsoft Edge for Android that could allow an unauthorized local attacker to disclose information. Core details from connected sources confirm the impact is local information disclosure; CVSS v3.1 base score 6.2 (Medium) with h...

CVE-2026-58522

CVE-2026-58522 pertains to Microsoft Edge for Android and describes a relative path traversal that could allow an unauthorized local disclosure of information. The NVD/CVE records label the flaw as a Relative path traversal in Edge for Android, enabling local information disclosure. The CVSS 3.1 ...

CVE-2026-57986

The CVE-2026-57986 entry concerns a use-after-free in Microsoft Edge (Chromium-based) that can allow an unauthorized attacker to execute code over a network . The vulnerability is described as a network-exploitable remote code execution with high impact on confidentiality, integrity, and availabi...

CVE-2026-45492

Microsoft Edge (Chromium-based) contains a security feature bypass (CVE-2026-45492) due to improper input validation. The issue is exploitable over a network by an unauthenticated attacker to bypass a security feature in Edge. Connected sources identify the affected product as Edge (Chromium-base...

CVE-2026-57993

CVE-2026-57993 describes a server-side request forgery in Microsoft Edge (Chromium-based) that enables an unauthorized attacker to perform network spoofing. The vulnerability affects Edge components used for handling requests; the root cause and exact exploitable paths are not detailed in the pro...

CVE-2026-57977

Summary : CVE-2026-57977 affects Microsoft Edge (Chromium-based). The issue is an improper neutralization of input during web page generation (XSS), enabling an unauthorized attacker to perform spoofing over a network. According to the provided metrics, the exploit has a CVSSv3.1 base score of 7....

CVE-2026-45494

Technical details for CVE-2026-45494 are not publicly provided in the supplied documents. Monitor for updates from NVD and Microsoft MSRC.

CVE-2026-57985

CVE-2026-57985 involves Microsoft Edge (Chromium-based) and is tied to an issue of improper input validation. The description indicates an unauthorized attacker could achieve remote code execution over a network, requiring user interaction despite a network-based attack vector. CVSS 3.1 metrics (...

CVE-2026-58299

CVE-2026-58299 affects Microsoft Edge for Android. The issue is a time-of-check time-of-use (TOCTOU) race condition that could allow a network-based attacker to execute code remotely. This is documented with a CVSS v3.1 base score of 7.5 (HIGH) and network attack vector, requiring no privileges b...

CVE-2026-58283

Microsoft Edge (Chromium-based) is affected by CVE-2026-58283 due to a resource access vulnerability described as a type confusion issue. The underlying problem could allow an unauthenticated attacker to perform network-based spoofing. The NVD entry summarizes the impact as spoofing with a CVSSv3...

CVE-2026-70331

CVE-2026-70331 affects Microsoft Edge for iOS and involves an improper neutralization of input used for LLM prompting , allowing an unauthorized attacker to perform spoofing over a network . The vulnerability requires user interaction and no prior privileges , with low attack complexity over the ...

CVE-2026-58296

CVE-2026-58296 affects Microsoft Edge for Android. The vulnerability is an information disclosure that allows an unauthenticated attacker to disclose private user information over a network. CVSS 3.1 base score 7.1 (HIGH); attack vector NETWORK; user interaction REQUIRED; no privileges required; ...

CVE-2026-70309

An origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network. The CVSS 3.1 score is 5.4 (Medium) with a vector of AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N, indicating that exploitation requires user interaction and results in...

CVE-2026-57975

Microsoft Edge (Chromium-based) is affected by CVE-2026-57975 due to a type confusion when accessing a resource with an incompatible type. This allows remote code execution over the network by an unauthenticated attacker. CVSS 3.1 base score is 7.5 (HIGH) with HIGH impact to confidentiality, inte...

CVE-2026-0391

CVE-2026-0391 describes a user-interface misrepresentation in Microsoft Edge (Chromium-based) for Android that could allow an attacker to spoof information over a network. The vulnerability affects Microsoft Edge for Android, with the issue framed as a UI spoofing flaw rather than a network-explo...

CVE-2026-45489

Technical details for CVE-2026-45489 are not publicly available in the provided documents. Monitor for updates.

CVE-2026-58282

Technical details are not publicly available in the provided documents. Monitor for updates and official mitigations when released.

CVE-2026-58281

CVE-2026-58281 — Microsoft Edge (Chromium-based) Root cause: Deserialization of untrusted data in Edge may allow remote code execution. The vulnerability is exploitable over a network and falls under a high severity (CVSS v3.1 base score 8.3; AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H). Impact: Unauthor...

CVE-2026-40416

CVE-2026-40416 affects Microsoft Edge (Chromium-based) for Android. The vulnerability is a UI misrepresentation that allows an unauthorized attacker to spoof information over the network, potentially misleading users. Affected component is the Edge browser on Android; root cause is misleading UI ...

CVE-2026-42891

CVE-2026-42891 affects Microsoft Edge (Chromium-based) for Android . The issue is a UI misrepresentation that can enable an attacker to perform a spoofing action over a network. Documented impact includes spoofing user interface with potential exposure of sensitive information, aligned with the C...