CVE-2026-57978General(microsoft / edge_chromium)

LOWCVSS 5.4 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch microsoft edge_chromium systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

microsoft CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57978

Weakness type (CWE)

CWE-346

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

edge_chromium

Threat summary

Patch or workaround signal is available
6 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
General: 5 classified signals
Peaked 1d ago at 4 mentions (2026-07-26); latest day: 2
6 total mentions across 2 days

Affected systems

Vendors

microsoft

Products

edge_chromium

Deep dive

Activity timeline6 mentions / 2d

Signal classification2 categories

General

583.3%

Patch

116.7%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-26	4	General4
2026-07-27	2	General1Patch1

Full discourse6 posts

kawn@kawn202091d
Patch
#microsoftupdate #securityupdate #Edge マイクロソフトが Microsoft Edge for Stable (Version 150.0.4078.99) をリリース． CVE ベースで 3 件の脆弱性に対処．・CVE-2026-57978 ・CVE-2026-57989 ・CVE-2026-57990 https://x.com/kawn2020/status/2081649747753070812
Post summary
Microsoft released Edge v150.0.4078.99, which fixes three CVEs—CVE-2026-57978, CVE-2026-57989, and CVE-2026-57990.
0000057
92 followersView on X
VulDB 🛡@vuldb91d
General
It is possible to see elevated activities targeting Microsoft Edge (CVE-2026-57978) https://vuldb.com/vuln/383352/cti
Post summary
The tweet notes possibly higher activity targeting Microsoft Edge via CVE-2026-57978 but offers no concrete proof of exploitation, technical details, or mitigation information.
0000084
2.3K followersView on X
MalwareObserver@MalwareObserver91d
General
🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-57978](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57978) Origin val... https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57978 #ZeroDay #PatchManagement #Vulnerability
Post summary
The post simply alerts to the existence of CVE-2026-57978, linking to the MSRC detail page without providing further technical, exploit, or mitigation information.
0000040
16 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds91d
General
CVE-2026-57978 Origin Validation Error in Microsoft Edge Chromium-Based Network Spoofing https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-57978
Post summary
The post identifies CVE‑2026‑57978 as an origin validation error leading to network spoofing in Microsoft Edge Chromium‑based browser, but provides no additional evidence of exploitation, patches, or PoC.
00000131
4.1K followersView on X
CVE@CVEnew92d
General
CVE-2026-57978 Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network. https://www.cve.org/CVERecord?id=CVE-2026-57978
Post summary
The post simply references CVE‑2026‑57978, noting it allows spoofing via an origin validation error, but provides no PoC, exploit code, or evidence of active exploitation.
00000855
57.8K followersView on X
VulDB 🛡@vuldb92d
General
A new vulnerability with increased severity was disclosed for Microsoft Edge (CVE-2026-57978) https://vuldb.com/vuln/383352
Post summary
The post announces CVE‑2026‑57978 for Microsoft Edge, noting that its severity has increased, but offers no technical details, exploit code, or patch information.
00000104
2.3K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	edge_chromium	-	-	-

Explore more

Back to dashboard microsoft CVEs edge_chromium vulnerabilities

What researchers are saying

CVE-2026-57978

MalwareObserver[verified]@MalwareObserverGeneral

The post simply alerts to the existence of CVE-2026-57978, linking to the MSRC detail page without providing further technical, exploit, or mitigation information.

kawn@kawn2020Patch

Microsoft released Edge v150.0.4078.99, which fixes three CVEs—CVE-2026-57978, CVE-2026-57989, and CVE-2026-57990.

VulDB 🛡@vuldbGeneral

The tweet notes possibly higher activity targeting Microsoft Edge via CVE-2026-57978 but offers no concrete proof of exploitation, technical details, or mitigation information.

Vulmon Vulnerability Feed@VulmonFeedsGeneral

The post identifies CVE‑2026‑57978 as an origin validation error leading to network spoofing in Microsoft Edge Chromium‑based browser, but provides no additional evidence of exploitation, patches, or PoC.

CVE@CVEnewGeneral

The post simply references CVE‑2026‑57978, noting it allows spoofing via an origin validation error, but provides no PoC, exploit code, or evidence of active exploitation.

VulDB 🛡@vuldbGeneral

The post announces CVE‑2026‑57978 for Microsoft Edge, noting that its severity has increased, but offers no technical details, exploit code, or patch information.