5.4
CVE-2026-57980
- EPSS 0.22%
- Veröffentlicht 17.07.2026 21:29:27
- Zuletzt bearbeitet 21.07.2026 15:18:28
- CVE-Watchlists
- Unerledigt
Microsoft Edge (Chromium-based) Tampering Vulnerability
Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Edge Chromium Version < 150.0.4078.80
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.22% | 0.129 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| Microsoft | 5.4 | 2.8 | 2.5 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
|
CWE-288 Authentication Bypass Using an Alternate Path or Channel
The product requires authentication, but the product has an alternate path or channel that does not require authentication.
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57980