CVE-2026-45489 - Microsoft Edge (Chromium-based) Spoofing Vulnerability

MEDIUM

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Published Jul 3, 2026

6.5

MEDIUM

CVSS 3.1

EPSS 0.88%

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Vendor Microsoft Product Microsoft Edge (Chromium-based) Default
unknown
Affected
- ≥ 1.0.0.0, < 150.0.4078.48

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Microsoft	Microsoft Edge (Chromium-based)	unknown	Affected ≥ 1.0.0.0, < 150.0.4078.48

No remediation recorded yet.

Weaknesses (2)

CWE-290

Authentication Bypass by Spoofing

CWE-749

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-41598		Advisory
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45489		vendor-advisorypatchVendor Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Jul 3, 2026

Updated Sep 25, 2026

Reserved May 12, 2026

CISA Vulnrichment

Updated Jul 6, 2026

NVD

Status Modified

Modified Jul 12, 2026

Red Hat

No data

ENISA EUVD

Assigner microsoft

Published Jul 3, 2026

Updated Sep 25, 2026

GitHub

No data