MicrosoftCVE-2026-66311

Microsoft Edge (Chromium-based): missing authorization

Medium6.2CVE-2026-66311 · Published Aug 4, 2026 · updated Aug 6, 2026

Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.

Microsoft advisory

Affected versions

Package	Affected	Fixed in
Microsoft Edge (Chromium-based) Product	>= 1.0.0.0, < 151.0.4129.59	151.0.4129.59

Details and references

CVSS 3.1: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-862

More Microsoft advisories

Date	Advisory	Severity	Fixed in
Aug 4	Microsoft Edge (Chromium-based): spoofing Medium5.4Aug 4 CVE-2026-66316151.0.4129.59	Medium5.4	151.0.4129.59
Aug 4	Microsoft Edge (Chromium-based): tampering Medium5.4Aug 4 CVE-2026-66317151.0.4129.59	Medium5.4	151.0.4129.59
Aug 4	Microsoft Edge (Chromium-based): origin validation error High8.1Aug 4 CVE-2026-66318151.0.4129.59	High8.1	151.0.4129.59
Aug 4	Microsoft Edge (Chromium-based): type confusion High7.4Aug 4 CVE-2026-66321151.0.4129.59	High7.4	151.0.4129.59
Aug 4	Microsoft Edge (Chromium-based): spoofing High7.1Aug 4 CVE-2026-66322151.0.4129.59	High7.1	151.0.4129.59
Aug 4	Microsoft Edge (Chromium-based): server-side request forgery Medium6.1Aug 4 CVE-2026-66325151.0.4129.59	Medium6.1	151.0.4129.59

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.