Overview
What is CVE-2026-65804?
Improper control of generation of code ('code injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
Vulnerability intelligence
CVE-2026-65804 and is rated Medium severity with a CVSS score of 6.1. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
Improper control of generation of code ('code injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.