CVEFinder.io

CVE-2026-45488

🔶 medium
🔍 Scan for this CVE
Summary

User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

CVSS Score
5.4
Medium
EPSS Score
0.3
Exploit Probability
Published Date
2026-07-03
First Seen: 2026-07-04
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 22.6% of all 338,292 vulnerabilities in our database.

#261,731
Below average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: Jul 7, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Partial
Limited system impact
SSVC data provided by CISA
Last Modified 2026-07-07
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CWE IDs (Weakness Types)

📦 Affected Products 1

🔗 References 1

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-57980 🔶 medium 5.4 0.2 Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows an unauthorized attac... 2026-07-17
CVE-2026-58596 ⚠️ high 8.3 0.5 Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges o... 2026-07-12
CVE-2026-58281 ⚠️ high 8.3 0.7 Deserialization of untrusted data in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ove... 2026-07-11
CVE-2026-58525 ⚠️ high 8.2 0.4 Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature ... 2026-07-08
CVE-2026-45489 🔶 medium 6.5 0.5 Microsoft Edge (Chromium-based) Spoofing Vulnerability 2026-07-03
CVE-2026-55945 🔶 medium 4.2 0.2 Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-... 2026-07-03
These CVEs affect the same products