CVE-2026-58597
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
Insufficient UI warning of dangerous operations in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
Risk Assessment
An attacker can spoof a trusted website or interface, potentially leading to theft of credentials or other sensitive information from Edge users.
Recommendation
Immediately update Microsoft Edge to the latest available version that includes a fix for this vulnerability.
Other vulnerabilities in Microsoft Edge (Chromium-based)
See all- CVE-2026-41107High
Microsoft Edge (Chromium-based) has a vulnerability that allows external control of file name or path. This could enable an unauthorized attacker to disclose information over a network.
- CVE-2023-33145Medium
A vulnerability in Microsoft Edge (Chromium-based) allows for information disclosure. This may lead to unauthorized access to user data.
- CVE-2026-58294High
A Use-After-Free vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network.
- CVE-2026-33118Medium
A user interface issue in Microsoft Edge (Chromium-based) can lead to misrepresentation of critical information. This allows an unauthorized attacker to perform spoofing over a network.
- CVE-2023-36741High
A vulnerability in Microsoft Edge (Chromium-based) allows for elevation of privilege, potentially leading to unauthorized access to the system.
- CVE-2023-38158Low
A vulnerability in Microsoft Edge (Chromium-based) allows for information disclosure. An attacker could exploit this flaw to gain access to sensitive user data.
- CVE-2023-36787High
A vulnerability in Microsoft Edge (Chromium-based) allows for elevation of privilege, potentially leading to unauthorized access to the system.
- CVE-2023-38187Medium
A vulnerability in Microsoft Edge (Chromium-based) allows for elevation of privilege. An attacker can exploit this flaw to gain higher privileges on the system.
- CVE-2023-35392Medium
A vulnerability in Microsoft Edge (Chromium-based) allows for spoofing, which may lead to unauthorized access to user data.
- CVE-2023-33143High
A vulnerability in Microsoft Edge (Chromium-based) allows for elevation of privilege, potentially leading to unauthorized access to the system.
Original NVD description (English source)
Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.