This vulnerability (CVE-2026-56646) in Microsoft Edge (Chromium-based) involves the exposure of sensitive information to unauthorized actors, categorized under CWE-200. The flaw allows an attacker to conduct spoofing attacks over a network, potentially deceiving users or systems by presenting false information. The CVSS 3.1 base score is 6.5, reflecting a network attack vector with low complexity, no privileges required, but requiring user interaction. The impact is limited to confidentiality with high impact, without affecting integrity or availability. Microsoft has published an official fix for this vulnerability.

The vulnerability exposes sensitive information to unauthorized actors, which can lead to spoofing attacks over a network. This compromises confidentiality but does not affect integrity or availability. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the provided patch from the Microsoft Security Response Center advisory to remediate this vulnerability.