Information Disclosure Vulnerability in Microsoft Edge by Microsoft
CVE-2026-57989

7.4HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft Edge (chromium-based)
Vendor
CVE Published:
26 July 2026

What is CVE-2026-57989?

An origin validation error in the Chromium-based Microsoft Edge browser could allow unauthorized attackers to disclose sensitive information over a network. This vulnerability can potentially be exploited without user interaction, making it critical for users to take necessary precautions. Affected users should refer to security advisories and implement patches provided by Microsoft to mitigate risks associated with this flaw.

Affected Version(s)

Microsoft Edge (Chromium-based) 1.0.0.0 < 150.0.4078.99

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
7.4
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.