CVE-2026-66311
published 2026-08-04CVE-2026-66311: Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.
PriorityP432medium6.2CVSS 3.1
AVLACLPRNUINSUCHINAN
EPSS
0.40%
33.6th percentile
Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | edge_chromium | < 151.0.4129.59 | 151.0.4129.59 |
| microsoft | microsoft_edge | >= 1.0.0.0 < 151.0.4129.59 | 151.0.4129.59 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Microsoft Edge up to 150.0.4078.99 improper authorization
vuldb·2026-08-04·CVSS 6.2
CVE-2026-66311 [MEDIUM] Microsoft Edge up to 150.0.4078.99 improper authorization
A vulnerability classified as problematic has been found in Microsoft Edge. Affected by this issue is some unknown functionality. The manipulation leads to improper authorization.
This vulnerability is uniquely identified as CVE-2026-66311. Local access is required to approach this attack. No exploit exists.
It is recommended to upgrade the affected component.
GHSA
Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.
ghsa_unreviewed·2026-08-04
CVE-2026-66311 [MEDIUM] CWE-862 Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.
Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-08-04
Published