AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

MicrosoftCVE-2026-65804

Microsoft Edge (Chromium-based): code injection

Microsoft

CVE-2026-65804 · Published Aug 4, 2026 · updated Aug 6, 2026

Medium6.1
Fix: upgrade to 151.0.4129.59 or later
Microsoft advisory

Improper control of generation of code ('code injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

Affected versions

PackageAffectedFixed in
Microsoft Edge (Chromium-based)
Product
>= 1.0.0.0, < 151.0.4129.59151.0.4129.59
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-94

More Microsoft advisories

All Microsoft
Medium 5.4Aug 4Microsoft Edge (Chromium-based): spoofingCVE-2026-66316fixed in 151.0.4129.59Medium 5.4Aug 4Microsoft Edge (Chromium-based): tamperingCVE-2026-66317fixed in 151.0.4129.59High 8.1Aug 4Microsoft Edge (Chromium-based): origin validation errorCVE-2026-66318fixed in 151.0.4129.59High 7.4Aug 4Microsoft Edge (Chromium-based): type confusionCVE-2026-66321fixed in 151.0.4129.59High 7.1Aug 4Microsoft Edge (Chromium-based): spoofingCVE-2026-66322fixed in 151.0.4129.59Medium 6.1Aug 4Microsoft Edge (Chromium-based): server-side request forgeryCVE-2026-66325fixed in 151.0.4129.59