Spoofing Vulnerability in Microsoft Edge (Chromium-based) by Microsoft
CVE-2026-58597

4.3MEDIUM

Key Information:

Vendor

Microsoft
Status
Microsoft Edge (chromium-based)
Vendor
CVE Published:
3 July 2026

What is CVE-2026-58597?

A spoofing vulnerability in Microsoft Edge (Chromium-based) permits unauthorized attackers to exploit insufficient user interface warnings concerning dangerous operations. This flaw allows malicious actors to manipulate user interactions and compromise security measures, leading to potential phishing and other deceptive attacks over the network.

Affected Version(s)

Microsoft Edge (Chromium-based) 1.0.0.0 < 150.0.4078.48

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.