CVE-2026-66323

EPSS 0.3%
Veröffentlicht 28.08.2026 17:45:31
Zuletzt bearbeitet 11.09.2026 17:17:43
Erkennungen
Login

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 1 VulnDex Vulnerability Enrichment 1

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Edge Chromium Version < 152.0.4191.53

VulnDex Vulnerability Enrichment

Diese Information steht angemeldeten Benutzern zur Verfügung.

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.3%	0.22

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
Microsoft	5.4	2.8	2.5	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

CWE-141 Improper Neutralization of Parameter/Argument Delimiters

The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could be interpreted as parameter or argument delimiters when they are sent to a downstream component.

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66323

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2026-66323

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2026-66323

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2026-66323

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2026-66323