CVE-2026-41107 is a vulnerability categorized under CWE-73 (External Control of File Name or Path) affecting Microsoft Edge (Chromium-based). It enables an unauthorized attacker to cause information disclosure over a network by manipulating file names or paths externally. The vulnerability has a CVSS 3.1 base score of 7.4, indicating high severity with network attack vector, low attack complexity, no privileges required, and user interaction needed. Microsoft has released an official fix for this issue as documented in their security update guide.

Successful exploitation of this vulnerability can lead to unauthorized disclosure of sensitive information over a network. The attacker does not require privileges but does need user interaction. The confidentiality impact is high, while integrity and availability are not affected.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft as detailed in the vendor advisory (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-41107) to remediate this vulnerability.