SEPTEMBER 1, 2026
Live Feed
Back to database
Case File

CVE-2026-66324

MEDIUM · CVSS 6.5 EPSS 0.67%

Source: NVD + CISA KEV + EPSS · Published 2026-08-28 · Last synced 2026-09-01

CyberRota Analysis

AI-Generated

Microsoft Edge (Chromium-based) is vulnerable to an external control of file name or path, enabling unauthorized attackers to execute spoofing attacks over a network. This could lead to potential phishing attempts or the distribution of malicious content, impacting user trust and data integrity. Organizations using Microsoft Edge should prioritize this vulnerability to mitigate risks associated with user deception and data compromise.

CVE
CVE-2026-66324
Severity
MEDIUM
CVSS
6.5
EPSS
0.67%
Microsoft

Original NVD Description

External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

Related CVEs

Other vulnerabilities affecting the same vendor(s)