This vulnerability, identified as CVE-2026-56646 and classified under CWE-200 (Exposure of Sensitive Information), affects Microsoft Edge (Chromium-based). It allows an unauthorized attacker to gain access to sensitive information over a network, which can be leveraged to perform spoofing attacks. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level. Microsoft has released an official fix to remediate this issue.

The vulnerability results in the exposure of sensitive information to unauthorized actors, which can facilitate spoofing attacks over a network. There is no indication of impact on integrity or availability. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the provided security update from the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-56646 to remediate this vulnerability.