Spoofing Vulnerability in Microsoft Edge by Microsoft
CVE-2026-58282

8.1HIGH

Key Information:

Vendor

Microsoft
Status
Microsoft Edge (chromium-based)
Vendor
CVE Published:
3 July 2026

What is CVE-2026-58282?

An improper access control vulnerability in Microsoft Edge (Chromium-based) enables attackers to exploit the browser to conduct spoofing attacks across networks, potentially compromising user data and security. This can allow unauthorized access to sensitive information and lead to further exploitation. Users and administrators should implement the recommended security patches to mitigate this risk.

Affected Version(s)

Microsoft Edge (Chromium-based) 1.0.0.0 < 150.0.4078.48

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
High
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.