This vulnerability, identified as CWE-20 (Improper Input Validation), affects Microsoft Edge (Chromium-based) version 1.0.0.0. It allows a security feature bypass due to insufficient validation of input data. The CVSS 3.1 base score is 5.4 (medium severity), with network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality and integrity. Microsoft has published an official fix to remediate this issue.

Successful exploitation could bypass security features in Microsoft Edge, potentially leading to limited confidentiality and integrity impacts. There is no indication of availability impact or known active exploitation. The vulnerability requires user interaction and can be exploited remotely without privileges.

An official fix is available from Microsoft. Users and administrators should apply the patch as provided in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45492 to remediate this vulnerability. No additional mitigation steps are indicated by the vendor.