A spoofing vulnerability in Microsoft Edge (Chromium-based) allows remote attackers to bypass origin validation, enabling them to trick users into believing they are interacting with a trusted website. The flaw, tracked as CVE-2026-57978, affects all pre-patch versions of Edge and can be exploited via a malicious site with user interaction. No active exploitation or public exploit code has been identified, and Microsoft has released a patch.
Authentication Bypass
Google
Microsoft
Microsoft Edge Chromium Based
NVD
VulDB
CVSS 3.1
5.4
EPSS
0.2%