This vulnerability, identified as CVE-2026-57977, involves improper neutralization of input during web page generation in Microsoft Edge (Chromium-based), classified under CWE-79 (Cross-site Scripting). It allows an attacker to conduct spoofing attacks by injecting malicious scripts that are not properly sanitized. The vulnerability affects version 1.0.0.0 of the product. Microsoft has released an official fix to address this issue, as detailed in their security advisory.

Successful exploitation of this vulnerability could allow an attacker to perform spoofing attacks, potentially misleading users or executing malicious scripts in the context of the affected browser. The confidentiality impact is low, integrity impact is high, and availability is not affected. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft to remediate this vulnerability. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57977 for detailed patching instructions.