CVE-2026-45494: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Published May 15, 2026
·Updated
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Affected Software
4 affected componentsFixes available
Microsoft Edge (Chromium-based)
Microsoft Edge Chromium<148.0.3967.70
Microsoft Edge<148.0.3967.70
Microsoft Edge (Chromium-based)<148.0.3967.70
148.0.3967.70
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 148.0.3967.70
Event History
May 15, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
May 18, 2026
CVE Published
via MITRE·05:03 PM
Data Sourced
via MITRE·05:03 PM
DescriptionSeverity
Data Sourced
via NVD·06:17 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2026-45494?
CVE-2026-45494 has been rated as a critical severity vulnerability.
2
How do I fix CVE-2026-45494?
To fix CVE-2026-45494, update Microsoft Edge (Chromium-based) to the latest available version.
3
What impact does CVE-2026-45494 have on users?
CVE-2026-45494 can potentially allow attackers to spoof content in Microsoft Edge, misleading users.
4
Which versions of Microsoft Edge are affected by CVE-2026-45494?
CVE-2026-45494 affects Microsoft Edge (Chromium-based) versions prior to 148.0.3967.70.
5
Is there a workaround for CVE-2026-45494 until a fix is applied?
Currently, no specific workarounds for CVE-2026-45494 have been published; users are advised to update immediately.