MicrosoftCVE-2026-57980

Microsoft Edge (Chromium-based): authentication bypass

Medium5.4CVE-2026-57980 · Published Jul 17, 2026 · updated Jul 21, 2026

Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network.

Microsoft advisory

Affected versions

Package	Affected	Fixed in
Microsoft Edge (Chromium-based) Product	>= 1.0.0.0, < 150.0.4078.80	150.0.4078.80

Details and references

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-288

More Microsoft advisories

All Microsoft

Date	Advisory	Severity	Fixed in
Jul 17	Microsoft Windows RDP: unauthorized attacker could disclose information over High7.1Jul 17 CVE-2026-561712.1.65.2+1 more	High7.1	2.1.65.2+1 more
Jul 16	Microsoft Windows Admin Center: cross-site scripting Medium6.1Jul 16 CVE-2026-586432.6.7	Medium6.1	2.6.7
Jul 16	Microsoft Windows Terminal App: integer overflow High7.5Jul 16 CVE-2026-591171.24.11321.0	High7.5	1.24.11321.0
Jul 16	Microsoft Office SharePoint: cross-site scripting Medium4.6Jul 16 CVE-2026-6282616.0.5561.1001+2 more	Medium4.6	16.0.5561.1001+2 more
Jul 16	Microsoft Windows Backup Engine: race condition High7.0Jul 16 CVE-2026-5859810.0.19044.7548+4 more	High7.0	10.0.19044.7548+4 more
Jul 14	Secret exfiltration vulnerability HighJul 14 CVE-2026-472821.128.1	High	1.128.1

Affected versions

More Microsoft advisories

Critical advisories by email