CVE-2026-66324

External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

  • Published Aug 28, 2026
  • CVSS 6.5 medium
  • 0.9% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-66324 at the National Vulnerability Database