CVE WatchOct 25, 2026

CVE-2026-58597

Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over

CVSS

4.3

Medium

EPSS

0.7%

p53

KEV

—

Exploit Today

0-100

Published: Jul 3, 2026 · Last modified: Oct 25, 2026 · CWE-357

EPSS · 30d

0.7%EPSS · 30 days0.7%

2026-09-282026-10-25

Technical description

Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

Official references

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58597

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-477823.3 LOW

2.7%

——1Android App "RoboForm Password Manager" provided by Siber Systems, Inc. handles Android intents without sufficient URL validation, user confirmation nor notification. If a URL to some malicious web page is given through an intent, RoboForm may silently download files without user confirmation nor notification.96d CVE-2026-261517.1 HIG

57.3%

——17Insufficient ui warning of dangerous operations in Windows Remote Desktop allows an unauthorized attacker to perform spoofing over a network.10h CVE-2024-300585.4 MED

33.4%

——10Microsoft Edge (Chromium-based) Spoofing Vulnerability99d CVE-2024-261884.3 MED

56.9%

——17Microsoft Edge (Chromium-based) Spoofing Vulnerability78d