MicrosoftCVE-2026-66316

Microsoft Edge (Chromium-based): spoofing

Medium5.4CVE-2026-66316 · Published Aug 4, 2026 · updated Aug 6, 2026

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

Microsoft advisory

Affected versions

Package	Affected	Fixed in
Microsoft Edge (Chromium-based) Product	>= 1.0.0.0, < 151.0.4129.59	151.0.4129.59

Details and references

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-346

More Microsoft advisories

Date	Advisory	Severity	Fixed in
Aug 4	Microsoft Edge (Chromium-based): tampering Medium5.4Aug 4 CVE-2026-66317151.0.4129.59	Medium5.4	151.0.4129.59
Aug 4	Microsoft Edge (Chromium-based): origin validation error High8.1Aug 4 CVE-2026-66318151.0.4129.59	High8.1	151.0.4129.59
Aug 4	Microsoft Edge (Chromium-based): type confusion High7.4Aug 4 CVE-2026-66321151.0.4129.59	High7.4	151.0.4129.59
Aug 4	Microsoft Edge (Chromium-based): spoofing High7.1Aug 4 CVE-2026-66322151.0.4129.59	High7.1	151.0.4129.59
Aug 4	Microsoft Edge (Chromium-based): server-side request forgery Medium6.1Aug 4 CVE-2026-66325151.0.4129.59	Medium6.1	151.0.4129.59
Aug 4	Microsoft Edge (Chromium-based): missing authorization Medium6.5Aug 4 CVE-2026-66326151.0.4129.59	Medium6.5	151.0.4129.59

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.