CVE-2026-66318
published 2026-08-04CVE-2026-66318: Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
PriorityP346high8.1CVSS 3.1
AVNACLPRNUIRSUCHIHAN
EPSS
0.36%
28.6th percentile
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | edge_chromium | < 151.0.4129.59 | 151.0.4129.59 |
| microsoft | microsoft_edge | >= 1.0.0.0 < 151.0.4129.59 | 151.0.4129.59 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
ghsa_unreviewed·2026-08-04
CVE-2026-66318 [HIGH] CWE-346 Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
VulDB
Microsoft Edge up to 150.0.4078.99 improper authorization
vuldb·2026-08-04·CVSS 8.1
CVE-2026-66318 [HIGH] Microsoft Edge up to 150.0.4078.99 improper authorization
A vulnerability, which was classified as problematic, was found in Microsoft Edge. Affected by this issue is some unknown functionality. The manipulation results in improper authorization.
This vulnerability is identified as CVE-2026-66318. The attack can be executed remotely. There is not any exploit available.
You should upgrade the affected component.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-08-04
Published