Overview
What is CVE-2026-77490?
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
Vulnerability intelligence
CVE-2026-77490 and is rated Medium severity with a CVSS score of 6.1. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.