CVE-2026-66317
Received Received - Intake

Microsoft Edge Chromium Origin Validation Error

Publication date: 2026-08-04

Last updated on: 2026-08-04

Assigner: Microsoft Corporation

Description
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-04
Last Modified
2026-08-04
Generated
2026-08-04
AI Q&A
2026-08-04
EPSS Evaluated
N/A
NVD
CVE-2026-66317
EUVD
EUVD-2026-52532

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
microsoft edge *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-346 The product does not properly verify that the source of data or communication is valid.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an origin validation error in Microsoft Edge (Chromium-based) that allows an unauthorized attacker to perform tampering over a network. It could let an attacker manipulate data or interactions between a user and a website without proper authorization.

Impact Analysis

This vulnerability could allow an attacker to alter or tamper with data exchanged between you and a website, potentially leading to unauthorized actions or data manipulation. It may expose sensitive information or disrupt normal website functionality.

Compliance Impact

This vulnerability could lead to unauthorized data tampering or exposure, which may violate compliance requirements for GDPR (data integrity and confidentiality) and HIPAA (protected health information integrity). Organizations using affected versions of Microsoft Edge may face compliance risks.

Mitigation Strategies

Update Microsoft Edge to the latest version immediately to patch the origin validation error. Disable unnecessary network services and monitor for unusual tampering attempts.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-66317. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart