What is the CVSS score of CVE-2026-57988?

CVE-2026-57988 has a CVSS 3.1 base score of 7.1 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L. EPSS exploitation probability: 0.5%.

Which versions of Microsoft Edge Chromium Based are affected by CVE-2026-57988?

Microsoft Edge users face remote code execution risk when visiting attacker-controlled websites, potentially compromising sensitive business data and system integrity across your organization.. A patch is available.

How to fix or mitigate CVE-2026-57988?

Within 24 hours: Notify all Edge users and enable automatic updates; verify patch version availability from Microsoft security advisory. Within 7 days: Confirm patch deployment across all Edge installations in your environment. Within 30 days: Conduct security awareness training on malicious links and assess system logs for unauthorized access indicators.

Microsoft Edge Chromium Based CVE-2026-57988

EUVD-2026-41652 HIGH

Relative Path Traversal (CWE-23)

2026-07-03 microsoft

GHSA-62v5-4xc7-qm62

Path Traversal Microsoft Google Microsoft Edge Chromium Based

7.1

CVSS 3.1 · Vendor: microsoft

Temporal: 6.2

Severity by source

Vendor (microsoft) PRIMARY

7.1 HIGH

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

CIRCL (temporal)

6.2 MEDIUM

cvss

Primary rating from Vendor (microsoft).

CVSS VectorVendor: microsoft

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

Low

Lifecycle Timeline

Analysis Generated

Jul 03, 2026 - 21:13 vuln.today

CVE Published

Jul 03, 2026 - 20:35 cve.org

HIGH 7.1

DescriptionCVE.org

Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

AnalysisAI

Code execution via relative path traversal in Microsoft Edge (Chromium-based) allows a remote unauthenticated attacker to run arbitrary code when a user is lured into interacting with attacker-controlled content, consistent with the CVSS PR:N/UI:R vector. Rated CVSS 7.1 with high integrity impact (I:H), low availability impact (A:L), and no confidentiality impact (C:N). No public exploit identified at time of analysis (exploit maturity Unproven, E:U) and the CVE is not in CISA KEV, but an official vendor fix is available (RL:O).