CVE-2026-58278 MEDIUM

CVE-2026-58278: Microsoft Edge (Chromium-based) Spoofing Vulnerability

Vendor Microsoft
Product Microsoft Edge (Chromium-based)
Weakness CWE-918 · SSRF
Published July 3, 2026
Last update July 3, 2026
View on NVD All CVEs

CVSS base score

5.4/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L/E:U/RL:O/RC:C

What the vulnerability does

01Description

Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

Key dates

02Disclosure timeline

July 3, 2026 CVE published
July 3, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-57100 Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability CVE-2026-50131 Fedify has an incomplete SSRF mitigation after GHSA-p9cg-vqcc-grcx: validatePublicUrl allows special-use IPv4 ranges CVE-2026-13751 Snowflake CLI Server-Side Request Forgery via Arbitrary URL Fetch in !source/!load CVE-2026-40999 Spring WS SSRF via unvalidated WS-Addressing reply destinations CVE-2026-46698 Fediverse Embeds: Public-nonce SSRF via ftf_get_site_info AJAX action