Summary
Impact: Tampering. Microsoft rating: Important. Not known to be exploited — Exploitation Unlikely. Customer action: Required.
Details
What is the version information for this release?
151.0.4129.59: 151.0.4129.59, 07/31/2026: 07/31/2026, 151.0.7922.71/.72: 151.0.7922.71/.72
According to the CVSS metrics, successful exploitation of this vulnerability could lead to major loss of confidentiality (C:H), and some loss of integrity (I:L), but no loss of availability (A:N). What does that mean for this vulnerability?
An attacker who successfully exploited this vulnerability could view sensitive information, (Confidentiality), and make some changes to disclosed information (Integrity), but they would not be able to affect Availability.
Security updates
151.0.4129.59 — https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security
Vulnerabilities 1
-
Medium 6.8
Microsoft Edge (Chromium-based) Tampering Vulnerability
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.
Revision history
-
#1
Information published.
References
-
CVE-2026-66313 Microsoft Edge (Chromium-based) Tampering Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66313
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss