This vulnerability, identified as CVE-2026-58282 and classified under CWE-284 (Improper Access Control), affects Microsoft Edge (Chromium-based) version 1.0.0.0. It enables an unauthorized attacker to conduct spoofing attacks over a network by exploiting improper access control mechanisms. The CVSS v3.1 base score is 8.1, indicating high severity, with network attack vector, high impact on integrity, low impact on confidentiality, and low impact on availability. Microsoft has issued an official fix for this vulnerability as documented in their security update guide.

An attacker without privileges or user interaction can exploit this vulnerability remotely over a network to perform spoofing, potentially leading to integrity compromise and limited confidentiality and availability impacts. This could allow the attacker to impersonate legitimate entities or deceive users or systems relying on Microsoft Edge (Chromium-based) version 1.0.0.0.

Microsoft has released an official fix for this vulnerability. Users and administrators should apply the security update provided by Microsoft to remediate this issue. Refer to the Microsoft security update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58282 for detailed patching instructions.