CVE-2026-66324: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Published Aug 28, 2026
·Updated
External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
Other sources
Microsoft Edge (Chromium-based) Spoofing Vulnerability
— Microsoft
Affected Software
8 affected componentsFixes available
Microsoft Edge<152.0.4191.53
Microsoft Edge (Chromium-based)<152.0.4191.53
152.0.4191.53
Microsoft Edge Chromium<152.0.4191.53
Microsoft Edge for MAC<152.0.4191.52
152.0.4191.52
Microsoft Edge for Linux<152.0.4191.52
152.0.4191.52
Microsoft Edge for iOS<152.0.4191.52
152.0.4191.52
Microsoft Edge for Android<152.0.4191.52
152.0.4191.52
Microsoft Edge for Windows<152.0.4191.52
152.0.4191.52
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 152.0.4191.53 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 152.0.4191.52
Event History
Aug 28, 2026
CVE Published
via Microsoft·02:00 PM
Data Sourced
via Microsoft·02:00 PM
DescriptionSeverityWeaknessAffected Software
Updated
via Microsoft·02:00 PM
DescriptionAffected Software
Updated
via Microsoft·02:00 PM
Affected Software
Updated
via Microsoft·02:00 PM
SeverityAffected Software
CVE Published
via MITRE·05:45 PM
Data Sourced
via MITRE·05:45 PM
DescriptionSeverity
Data Sourced
via NVD·08:19 PM
DescriptionSeverityWeaknessAffected Software