SEPTEMBER 14, 2026
Live Feed
Back to database
Case File

CVE-2026-77490

MEDIUM · CVSS 6.1 EPSS 0.30%

Source: NVD + CISA KEV + EPSS · Published 2026-09-11 · Last synced 2026-09-14

CyberRota Analysis

AI-Generated

Microsoft Edge (Chromium-based) is vulnerable to cross-site scripting due to improper input neutralization during web page generation, enabling unauthorized attackers to execute spoofing attacks over a network. This could lead to the compromise of user sessions or the theft of sensitive information. Organizations using Microsoft Edge should prioritize addressing this vulnerability to safeguard against potential exploitation.

CVE
CVE-2026-77490
Severity
MEDIUM
CVSS
6.1
EPSS
0.30%
Microsoft

Original NVD Description

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.