This vulnerability, identified as CWE-346 (Origin Validation Error), exists in Microsoft Edge (Chromium-based) version 1.0.0.0. It allows an attacker without privileges to spoof network communications by exploiting improper origin validation. The CVSS v3.1 base score is 7.1, indicating a high severity impact primarily due to the potential for high confidentiality impact and low integrity impact. Microsoft has published an official fix for this vulnerability, as detailed in their security advisory.

An attacker can exploit this origin validation error to spoof network communications, potentially leading to unauthorized access to sensitive information (high confidentiality impact). The integrity impact is low, and availability is not affected. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Microsoft Edge (Chromium-based) version 1.0.0.0 as soon as possible. Refer to the Microsoft security advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66322 for detailed patching instructions.