CVE-2026-66317
Analyzed Analyzed - Analysis Complete

Microsoft Edge Chromium Origin Validation Error

Vulnerability report for CVE-2026-66317, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-04

Last updated on: 2026-08-06

Assigner: Microsoft Corporation

Description

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-04
Last Modified
2026-08-06
Generated
2026-08-24
AI Q&A
2026-08-04
EPSS Evaluated
2026-08-22
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
microsoft edge_chromium to 151.0.4129.59 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-346 The product does not properly verify that the source of data or communication is valid.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an origin validation error in Microsoft Edge (Chromium-based) that allows an unauthorized attacker to perform tampering over a network. It could let an attacker manipulate data or interactions between a user and a website without proper authorization.

Detection Guidance

Detection of this vulnerability requires monitoring network traffic for tampering attempts targeting Microsoft Edge. Check for unusual modifications to web content or requests originating from untrusted sources. Use network monitoring tools like Wireshark to inspect HTTP/HTTPS traffic for suspicious patterns. Ensure Microsoft Edge is updated to the latest version to mitigate risks.

Impact Analysis

This vulnerability could allow an attacker to alter or tamper with data exchanged between you and a website, potentially leading to unauthorized actions or data manipulation. It may expose sensitive information or disrupt normal website functionality.

Compliance Impact

This vulnerability could lead to unauthorized data tampering or exposure, which may violate compliance requirements for GDPR (data integrity and confidentiality) and HIPAA (protected health information integrity). Organizations using affected versions of Microsoft Edge may face compliance risks.

Mitigation Strategies

Update Microsoft Edge to the latest version immediately to patch the origin validation error. Disable unnecessary network services and monitor for unusual tampering attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-66317. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart