CVE-2026-58286

30th percentile — higher than 30% of all known CVEs

A vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. The issue stems from improper access control.

An attacker can impersonate a trusted website, potentially leading to credential theft or phishing attacks against organization users.

Immediately update Microsoft Edge to the latest version available from the vendor. Implement policies to block unknown websites and monitor network traffic for suspicious activities.