This vulnerability, identified as CWE-346 (Origin Validation Error), exists in Microsoft Edge (Chromium-based) version 1.0.0.0. It allows an attacker without privileges to bypass origin validation controls, potentially leading to unauthorized information disclosure over a network. The CVSS v3.1 base score is 8.1, indicating high severity, with network attack vector, low attack complexity, no privileges required, user interaction required, and high impact on confidentiality and integrity. Microsoft has published an official fix for this vulnerability.

Exploitation of this vulnerability can lead to unauthorized disclosure of sensitive information over a network. The confidentiality and integrity of data can be compromised, but availability is not affected. The vulnerability does not require privileges but does require user interaction. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66318 to remediate this vulnerability.