Important CVSS 8.1 EPSS 0.00312 2026-07 archive

Executive Summary

Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

Overview

8.1
CVSS HIGH
Important
MS Severity
Not Exploited
MS Exploit Status
Exploitation Unlikely
MS Exploit Likelihood
Category Spoofing
Released Jul 14 2026
Last Updated Jul 14 2026
Publicly Disclosed No
CISA KEV Not Listed
Known Exploits None Known
EPSS Score 0.00312 — 0.23173 percentile

CVSS Vector

ATTACK VECTOR
Network
ATTACK COMPLEXITY
High
PRIVILEGES REQUIRED
None
USER INTERACTION
None
SCOPE
Changed
CONFIDENTIALITY
Low
INTEGRITY
High
AVAILABILITY
Low
EXPLOIT CODE MATURITY
Unproven
REMEDIATION LEVEL
Official Fix
REPORT CONFIDENCE
Confirmed
Temporal Score: 7.1

EPSS Score

0.00312
probability of exploitation in the next 30 days
0.23173 percentile - updated 2026-07-14
View on FIRST.org

Affected Products

1 affected product
Product KB Article Severity Impact Restart Required
Microsoft Edge (Chromium-based) Release Notes (Security Update) Important Spoofing No

Patches

1 patch
Article Type Restart
Release Notes Security Update No

Known Exploits

Acknowledgments

Kugelblitz with Microsoft