Relative Path Traversal in Microsoft Edge

Publication date: 2026-07-03

Last updated on: 2026-07-03

Assigner: Microsoft Corporation

Description

Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-03

Last Modified

2026-07-03

Generated

2026-07-04

AI Q&A

2026-07-04

EPSS Evaluated

N/A

NVD

CVE-2026-57988

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	edge	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-23	The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.

Attack-Flow Graph

Executive Summary

This vulnerability is a relative path traversal issue in Microsoft Edge (Chromium-based). It allows an unauthorized attacker to execute code remotely over a network by exploiting the way the browser handles file paths.

Impact Analysis

An attacker exploiting this vulnerability can execute code on your system remotely without needing prior privileges. This can lead to unauthorized actions, potentially compromising the integrity of your system and causing limited availability issues.

Hi! I’m here to help you understand CVE-2026-57988. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70