This vulnerability, identified as CVE-2026-45492 and classified under CWE-20 (Improper Input Validation), affects Microsoft Edge (Chromium-based). It enables an attacker without privileges to bypass a security feature remotely by exploiting improper input validation. The CVSS v3.1 base score is 5.4, indicating medium severity with network attack vector, low complexity, no privileges required, and user interaction needed. Microsoft has published an official fix for this vulnerability.

An attacker can bypass a security feature in Microsoft Edge remotely, potentially leading to limited confidentiality and integrity impacts. There is no indication of availability impact. The vulnerability requires user interaction and has not been reported exploited in the wild.

Microsoft has released an official fix for this vulnerability. Users and administrators should apply the provided security update from Microsoft promptly. Refer to the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45492 for detailed patch information and update instructions.