MicrosoftCVE-2026-57980

Microsoft Edge (Chromium-based): authentication bypass

CVE-2026-57980 · Published Jul 17, 2026 · updated Jul 21, 2026

Medium5.4

Fix: upgrade to 150.0.4078.80 or later

Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network.

Affected versions

Package	Affected	Fixed in
Microsoft Edge (Chromium-based) Product	>= 1.0.0.0, < 150.0.4078.80	150.0.4078.80

Details and references

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-288

More Microsoft advisories

All Microsoft

High 7.1Jul 17

Microsoft Windows RDP: unauthorized attacker could disclose information overCVE-2026-56171fixed in 2.1.65.2 +1 Medium 6.1Jul 16

Microsoft Windows Admin Center: cross-site scriptingCVE-2026-58643fixed in 2.6.7 High 7.5Jul 16

Microsoft Windows Terminal App: integer overflowCVE-2026-59117fixed in 1.24.11321.0 Medium 4.6Jul 16

Microsoft Office SharePoint: cross-site scriptingCVE-2026-62826fixed in 16.0.5561.1001 +2 High 7.0Jul 16

Microsoft Windows Backup Engine: race conditionCVE-2026-58598fixed in 10.0.19044.7548 +4 HighJul 14

Secret exfiltration vulnerabilityCVE-2026-47282fixed in 1.128.1