CVEFinder.io

CVE-2026-41107

⚠️ high
🔍 Scan for this CVE
Summary

External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

CVSS Score
7.4
High
EPSS Score
0.2
Exploit Probability
Published Date
2026-05-12
First Seen: 2026-05-17
📊 Relative Risk Intelligence

This CVE is Moderate Risk - more severe than 57.0% of all 326,604 vulnerabilities in our database.

#140,444
Above average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: May 13, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Partial
Limited system impact
SSVC data provided by CISA
Last Modified 2026-05-15
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
CWE IDs (Weakness Types)
CWE-73 CWE-610

📦 Affected Products 1

Vendor Product Status Affected Versions
microsoft edge_chromium Affected
< 148.0.3967.55

🔗 References 1

https://msrc.microsoft.com/update-guide/vulnerabilit...
Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-45492 🔶 medium 5.4 0.1 Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security featur... 2026-05-18
CVE-2026-45494 🔶 medium 5.4 0.1 Microsoft Edge (Chromium-based) Spoofing Vulnerability 2026-05-18
CVE-2026-45495 ⚠️ high 8.8 0.1 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 2026-05-18
CVE-2026-42838 🔶 medium 5.4 0.1 Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Edge (Ch... 2026-05-12
CVE-2026-42891 🔶 medium 6.5 0.1 User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized ... 2026-05-12
CVE-2026-40416 🔶 medium 4.3 0.0 User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized ... 2026-05-12
These CVEs affect the same products