MicrosoftCVE-2026-58522

Microsoft Edge (Chromium-based): path traversal

Medium6.8CVE-2026-58522 · Published Jul 3, 2026 · updated Jul 7, 2026

Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.

Microsoft advisory

Affected versions

Package	Affected	Fixed in
Microsoft Edge (Chromium-based) Product	>= 1.0.0.0, < 150.0.4078.48	150.0.4078.48

Details and references

CVSS 3.1: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-23

More Microsoft advisories

Date	Advisory	Severity	Fixed in
Jul 3	Microsoft Edge (Chromium-based): improper access control Medium6.5Jul 3 CVE-2026-58523150.0.4078.48	Medium6.5	150.0.4078.48
Jul 3	Microsoft Edge (Chromium-based): cross-site scripting Medium5.4Jul 3 CVE-2026-58524150.0.4078.48	Medium5.4	150.0.4078.48
Jul 3	Microsoft Edge (Chromium-based): spoofing Medium4.3Jul 3 CVE-2026-58597150.0.4078.48	Medium4.3	150.0.4078.48
Jul 3	Microsoft Edge (Chromium-based): path traversal Medium6.2Jul 3 CVE-2026-58300150.0.4078.48	Medium6.2	150.0.4078.48
Jul 3	Microsoft Edge (Chromium-based): improper input validation High7.5Jul 3 CVE-2026-58292150.0.4078.48	High7.5	150.0.4078.48
Jul 3	Microsoft Edge (Chromium-based): remote code execution High8.1Jul 3 CVE-2026-58293150.0.4078.48	High8.1	150.0.4078.48

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.