CVE-2026-65804
Received Received - Intake

Microsoft Edge Chromium-based Code Injection Spoofing

Publication date: 2026-08-04

Last updated on: 2026-08-04

Assigner: Microsoft Corporation

Description
Improper control of generation of code ('code injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-04
Last Modified
2026-08-04
Generated
2026-08-04
AI Q&A
2026-08-04
EPSS Evaluated
N/A
NVD
CVE-2026-65804
EUVD
EUVD-2026-52530

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
microsoft edge *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-94 The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a code injection flaw in Microsoft Edge (Chromium-based) that allows unauthorized attackers to perform spoofing attacks over a network. It involves improper control of code generation, enabling malicious input to execute unintended actions.

Impact Analysis

An attacker could exploit this to deceive users by spoofing legitimate content, potentially leading to phishing attacks, unauthorized actions, or data exposure. Users might unknowingly interact with malicious content disguised as trusted sources.

Compliance Impact

This vulnerability could lead to unauthorized data access or manipulation, violating GDPR (data protection) and HIPAA (health information privacy). Organizations may face compliance breaches if user data is compromised through spoofing or code injection.

Mitigation Strategies

Update Microsoft Edge to the latest version immediately to patch the vulnerability. Disable unnecessary browser extensions and restrict network access to untrusted sources.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-65804. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart