This vulnerability is a TOCTOU race condition in Microsoft Edge (Chromium-based) version 1.0.0.0. It allows an unauthorized attacker to disclose information over a network by exploiting the timing between the check and use of a resource. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity level. Microsoft has published an official fix for this issue, as detailed in their security advisory.

An attacker who successfully exploits this vulnerability could disclose sensitive information over a network without authorization. The integrity and availability of the system are not impacted, but confidentiality is compromised. The vulnerability requires no privileges and low attack complexity but user interaction is required.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Microsoft Edge (Chromium-based) version 1.0.0.0 as soon as possible to remediate this vulnerability. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66314 for detailed patch information and update instructions.