Microsoft Edge UI Spoofing Due to Insufficient Warnings

Publication date: 2026-07-03

Last updated on: 2026-07-06

Assigner: Microsoft Corporation

Description

Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-03

Last Modified

2026-07-06

Generated

2026-07-24

AI Q&A

2026-07-04

EPSS Evaluated

2026-07-23

NVD

CVE-2026-58597

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	edge_chromium	to 150.0.4078.48 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-357	The user interface provides a warning to a user regarding dangerous or sensitive operations, but the warning is not noticeable enough to warrant attention.

Attack-Flow Graph

Executive Summary

This vulnerability involves insufficient user interface warnings in Microsoft Edge (Chromium-based). It allows an unauthorized attacker to perform spoofing attacks over a network by exploiting the lack of adequate warnings about dangerous operations.

Impact Analysis

The vulnerability can impact you by enabling an attacker to spoof content or operations in Microsoft Edge without proper user warnings. This could lead to users being deceived into interacting with malicious content, potentially compromising their trust or security.

Hi! I’m here to help you understand CVE-2026-58597. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70