This vulnerability, identified as CWE-346 (Origin Validation Error), affects Microsoft Edge (Chromium-based) version 1.0.0.0. It allows an attacker to spoof content or network communications by exploiting improper origin validation. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low attack complexity and no privileges required, but user interaction is needed. The impact includes low confidentiality and integrity loss without availability impact. Microsoft has published an official fix to remediate this vulnerability.

An attacker can perform spoofing attacks over a network due to improper origin validation in Microsoft Edge (Chromium-based). This may lead to limited confidentiality and integrity impacts, such as misleading users or intercepting/modifying some data. There is no impact on system availability. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57978 to remediate this vulnerability.