This vulnerability (CWE-79) in Microsoft Edge (Chromium-based) arises from improper neutralization of input during web page generation, enabling cross-site scripting attacks. Exploitation could allow an attacker to conduct spoofing over a network, potentially misleading users or bypassing security controls. The vulnerability affects version 1.0.0.0 of Microsoft Edge (Chromium-based). Microsoft has released an official fix to address this issue.

Successful exploitation could lead to limited confidentiality and integrity impacts by enabling spoofing attacks via cross-site scripting. There is no impact on availability. The vulnerability requires no privileges and low attack complexity but user interaction is required. No known exploits are reported in the wild.

An official fix is available from Microsoft. Users and administrators should apply the vendor-provided update as detailed in the Microsoft Security Response Center advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58524 to remediate this vulnerability.