CVE WatchJul 6, 2026

CVE-2026-58597

Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over

CVSS

4.3

Medium

EPSS

0.4%

p32

KEV

—

Exploit Today

0-100

Published: Jul 3, 2026 · Last modified: Jul 6, 2026 · CWE-357

EPSS · 30d

0.4%EPSS · 30 days0.4%

2026-07-042026-07-23

Technical description

Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

Official references

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58597

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-477823.3 LOW

3.1%

——1Android App "RoboForm Password Manager" provided by Siber Systems, Inc. handles Android intents without sufficient URL validation, user confirmation nor notification. If a URL to some malicious web page is given through an intent, RoboForm may silently download files without user confirmation nor notification.2d CVE-2024-300585.4 MED

31.7%

——10Microsoft Edge (Chromium-based) Spoofing Vulnerability5d