AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

MicrosoftCVE-2026-70309

Microsoft Edge (Chromium-based): origin validation error

Microsoft

CVE-2026-70309 · Published Aug 28, 2026 · updated Aug 31, 2026

Medium5.4
Fix: upgrade to 150.0.4078.65 or later
Microsoft advisory

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

Affected versions

PackageAffectedFixed in
Microsoft Edge (Chromium-based)
Product
>= 1.0.0.0, < 150.0.4078.65150.0.4078.65
Details and references
CVSS 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-346

More Microsoft advisories

All Microsoft
High 8.8Aug 28Microsoft Edge: type confusionCVE-2026-72984fixed in 152.0.4191.53 +2Medium 5.4Aug 28Microsoft Edge: spoofingCVE-2026-70331fixed in 150.0.4078.50 +1Medium 5.4Aug 28Microsoft Edge: remote code executionCVE-2026-66323fixed in 152.0.4191.53 +2Medium 6.5Aug 28Microsoft Edge: spoofingCVE-2026-66324fixed in 152.0.4191.53 +2Medium 4.3Aug 28Microsoft Edge: use after freeCVE-2026-66798fixed in 152.0.4191.53 +2Medium 5.4Aug 28Microsoft Edge: improper authorizationCVE-2026-62904fixed in 152.0.4191.53 +2