MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2026-58597

CVSS 4.3v3.1pub. 2026-07-03upd. 2026-07-06

Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

🇵🇱 Read Polish description →

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Microsoft Edge
APP
Microsoft
< 150.0.4078.48

🟢

PATCH AVAILABLE

Vendor update available. Deploy in standard maintenance cycle.

CWE

CWE-357

References

msrc.microsoft.com/update-guide/vulnerability/CVE-2026-…

Related vulnerabilities

CVE-2023-6345CRITICAL9.6⚠ KEVPL ✓same product

Integer overflow w Skia w Google Chrome — sandbox escape

CVE-2022-4135CRITICAL9.6⚠ KEVPL ✓same product

Heap buffer overflow w GPU w Google Chrome — sandbox escape

CVE-2026-58289CRITICAL9.0PL ✓same product

Type Confusion w Microsoft Edge (Chromium) umożliwia zdalne wykonanie kodu

CVE-2024-21326CRITICAL9.6PL ✓same product

Eskalacja uprawnień w Microsoft Edge (Chromium) — CVE-2024-21326

CVE-2023-35618CRITICAL9.6PL ✓same product

Eskalacja uprawnień w Microsoft Edge (Chromium) — CWE-416 Use-After-Free