This vulnerability (CVE-2026-58282) in Microsoft Edge (Chromium-based) is classified under CWE-284 (Improper Access Control). It permits unauthorized attackers to conduct spoofing attacks over a network, potentially misleading users or systems by presenting falsified information. The CVSS v3.1 base score is 8.1, indicating high severity, with attack vector network, high attack complexity, no privileges required, no user interaction, and scope changed. Confidentiality impact is low, integrity impact is high, and availability impact is low. Microsoft has published an official fix for this vulnerability.

The vulnerability allows an attacker without privileges or user interaction to spoof network communications in Microsoft Edge (Chromium-based), potentially compromising data integrity and misleading users or systems. Confidentiality impact is limited, but integrity is significantly affected. Availability impact is low. There are no known exploits in the wild at this time.

An official fix is available from Microsoft for this vulnerability. Users and administrators should apply the provided security update as soon as possible. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58282 for detailed patch information and update instructions.