CVEFinder.io

CVE-2026-45494

🔶 medium
🔍 Scan for this CVE
Summary

Microsoft Edge (Chromium-based) Spoofing Vulnerability

CVSS Score
5.4
Medium
EPSS Score
0.0
Exploit Probability
Published Date
2026-05-18
First Seen: 2026-05-19
📊 Relative Risk Intelligence

This CVE is Lower Risk - more severe than 22.9% of all 321,566 vulnerabilities in our database.

#247,909
Below average severity
Severity Percentile
🎯 CISA SSVC Assessment Updated: May 19, 2026
🔍 Exploitation Status
None
No known exploits
⚙️ Automatable
NO
Requires human interaction
💥 Technical Impact
Partial
Limited system impact
SSVC data provided by CISA
Last Modified 2026-05-19
Source NVD 🔗
CVSS Vector 3.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CWE IDs (Weakness Types)
CWE-79

📦 Affected Products 1

Vendor Product Status Affected Versions
microsoft edge_chromium Affected
< 148.0.3967.70

🔗 References 1

https://msrc.microsoft.com/update-guide/vulnerabilit...
Vendor Advisory

🔗 Related CVEs 6

CVE ID Severity CVSS EPSS Summary Published
CVE-2026-45492 🔶 medium 5.4 0.1 Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security featur... 2026-05-18
CVE-2026-45495 ⚠️ high 8.8 0.1 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability 2026-05-18
CVE-2026-41107 ⚠️ high 7.4 0.2 External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose inf... 2026-05-12
CVE-2026-42838 🔶 medium 5.4 0.1 Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Edge (Ch... 2026-05-12
CVE-2026-42891 🔶 medium 6.5 0.1 User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized ... 2026-05-12
CVE-2026-40416 🔶 medium 4.3 0.0 User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized ... 2026-05-12
These CVEs affect the same products