CVE-2026-32187

Received Received - Intake

Defense in Depth Bypass in Microsoft Edge Chromium

Publication date: 2026-03-27

Last updated on: 2026-04-15

Assigner: Microsoft Corporation

Description

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-03-27

Last Modified

2026-04-15

Generated

2026-07-06

AI Q&A

2026-03-28

EPSS Evaluated

2026-04-15

NVD

CVE-2026-32187

EUVD

EUVD-2026-16813

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	edge	to 146.0.3856.84 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-1021	The web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain, which can lead to user confusion about which interface the user is interacting with.

Attack-Flow Graph

Compliance Impact

This vulnerability is classified as a Defense in Depth issue with a low severity impact, indicating limited direct impact on confidentiality, integrity, or availability.

Given its low severity and limited impact, it is unlikely to significantly affect compliance with common standards and regulations such as GDPR or HIPAA.

Executive Summary

CVE-2026-32187 is a defense in depth vulnerability found in Microsoft Edge (Chromium-based). It is a security issue that could potentially allow an attacker to bypass certain layers of security designed to protect the browser.

Impact Analysis

The impact of this vulnerability is considered low severity. It may allow limited unauthorized access or information disclosure but does not lead to significant compromise such as system takeover or data destruction.

Mitigation Strategies

The vulnerability is a Defense in Depth issue in Microsoft Edge (Chromium-based) with a low severity impact.

No specific mitigation steps or immediate actions are provided in the available resources.

Hi! I’m here to help you understand CVE-2026-32187. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70