This vulnerability (CVE-2026-58291) in Microsoft Edge (Chromium-based) is classified as CWE-672, which involves performing operations on a resource after it has expired or been released. Exploitation of this flaw can lead to unauthorized information disclosure over a network. The CVSS 3.1 base score is 6.1, reflecting a medium severity with network attack vector, high attack complexity, no privileges required, user interaction required, and a scope change. Microsoft has released an official fix for this vulnerability as documented in their security update guide.

Successful exploitation of this vulnerability could allow an attacker to disclose sensitive information over a network without requiring privileges but needing user interaction. The impact is limited to confidentiality, with no integrity or availability impact reported.

An official fix is available from Microsoft for this vulnerability. Users and administrators should apply the security update provided by Microsoft as detailed in the vendor advisory (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58291) to remediate this issue.