MicrosoftCVE-2026-57985

Microsoft Edge (Chromium-based): improper input validation

High7.6CVE-2026-57985 · Published Jul 3, 2026 · updated Jul 7, 2026

Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Microsoft advisory

Affected versions

Package	Affected	Fixed in
Microsoft Edge (Chromium-based) Product	>= 1.0.0.0, < 150.0.4078.48	150.0.4078.48

Details and references

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-20

More Microsoft advisories

Date	Advisory	Severity	Fixed in
Jul 3	Microsoft Edge (Chromium-based): improper access control Medium6.5Jul 3 CVE-2026-58523150.0.4078.48	Medium6.5	150.0.4078.48
Jul 3	Microsoft Edge (Chromium-based): cross-site scripting Medium5.4Jul 3 CVE-2026-58524150.0.4078.48	Medium5.4	150.0.4078.48
Jul 3	Microsoft Edge (Chromium-based): spoofing Medium4.3Jul 3 CVE-2026-58597150.0.4078.48	Medium4.3	150.0.4078.48
Jul 3	Microsoft Edge (Chromium-based): path traversal Medium6.2Jul 3 CVE-2026-58300150.0.4078.48	Medium6.2	150.0.4078.48
Jul 3	Microsoft Edge (Chromium-based): path traversal Medium6.8Jul 3 CVE-2026-58522150.0.4078.48	Medium6.8	150.0.4078.48
Jul 3	Microsoft Edge (Chromium-based): improper input validation High7.5Jul 3 CVE-2026-58292150.0.4078.48	High7.5	150.0.4078.48

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.