CVE-2026-45494
published 2026-05-18CVE-2026-45494: Microsoft Edge (Chromium-based) Spoofing Vulnerability
PriorityP427medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EPSS
0.30%
22.4th percentile
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | edge_chromium | < 148.0.3967.70 | 148.0.3967.70 |
| microsoft | microsoft_edge | >= 1.0.0.0 < 148.0.3967.70 | 148.0.3967.70 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-gcm7-9phg-q97r: Microsoft Edge (Chromium-based) Spoofing Vulnerability
ghsa_unreviewed·2026-05-18
CVE-2026-45494 [MEDIUM] CWE-79 GHSA-gcm7-9phg-q97r: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
VulDB
Microsoft Edge up to 148.0.3967.55 cross site scripting
vuldb·2026-05-18·CVSS 5.4
CVE-2026-45494 [MEDIUM] Microsoft Edge up to 148.0.3967.55 cross site scripting
A vulnerability identified as problematic has been detected in Microsoft Edge. Affected by this vulnerability is an unknown functionality. Performing a manipulation results in cross site scripting.
This vulnerability is known as CVE-2026-45494. Remote exploitation of the attack is possible. No exploit is available.
You should upgrade the affected component.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-05-18
Published