Microsoft Edge Spoofing Vulnerability

Publication date: 2026-07-03

Last updated on: 2026-07-12

Assigner: Microsoft Corporation

Description

Microsoft Edge (Chromium-based) Spoofing Vulnerability

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-03

Last Modified

2026-07-12

Generated

2026-07-24

AI Q&A

2026-07-04

EPSS Evaluated

2026-07-22

NVD

CVE-2026-45489

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	edge_chromium	to 150.0.4078.48 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-749	The product provides an Applications Programming Interface (API) or similar interface for interaction with external actors, but the interface includes a dangerous method or function that is not properly restricted.
CWE-290	This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

Attack-Flow Graph

Executive Summary

This vulnerability is a spoofing issue in Microsoft Edge (Chromium-based). Spoofing vulnerabilities typically involve tricking users or systems into believing that something malicious is legitimate, potentially by falsifying information or disguising malicious content.

Impact Analysis

The vulnerability has a CVSS base score of 6.5, indicating a medium severity. It can be exploited remotely without privileges but requires user interaction. The impact is primarily on confidentiality (high impact), meaning sensitive information could be exposed, but it does not affect integrity or availability.

Hi! I’m here to help you understand CVE-2026-45489. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70