MicrosoftCVE-2026-58523

Microsoft Edge (Chromium-based): improper access control

Medium6.5CVE-2026-58523 · Published Jul 3, 2026 · updated Jul 7, 2026

Improper access control in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.

Microsoft advisory

Affected versions

Package	Affected	Fixed in
Microsoft Edge (Chromium-based) Product	>= 1.0.0.0, < 150.0.4078.48	150.0.4078.48

Details and references

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-284

More Microsoft advisories

Date	Advisory	Severity	Fixed in
Jul 3	Microsoft Edge (Chromium-based): cross-site scripting Medium5.4Jul 3 CVE-2026-58524150.0.4078.48	Medium5.4	150.0.4078.48
Jul 3	Microsoft Edge (Chromium-based): spoofing Medium4.3Jul 3 CVE-2026-58597150.0.4078.48	Medium4.3	150.0.4078.48
Jul 3	Microsoft Edge (Chromium-based): path traversal Medium6.2Jul 3 CVE-2026-58300150.0.4078.48	Medium6.2	150.0.4078.48
Jul 3	Microsoft Edge (Chromium-based): path traversal Medium6.8Jul 3 CVE-2026-58522150.0.4078.48	Medium6.8	150.0.4078.48
Jul 3	Microsoft Edge (Chromium-based): improper input validation High7.5Jul 3 CVE-2026-58292150.0.4078.48	High7.5	150.0.4078.48
Jul 3	Microsoft Edge (Chromium-based): remote code execution High8.1Jul 3 CVE-2026-58293150.0.4078.48	High8.1	150.0.4078.48

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.