CVE-2026-57989Disclosure(microsoft / edge_chromium)

LOWCVSS 7.4 · HIGH

Signal is active with 3 mentions in latest observed window

Immediate actions

Patch microsoft edge_chromium systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

microsoft CVEs Back to dashboard

0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57989

Weakness type (CWE)

CWE-346

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

edge_chromium

Threat summary

Patch or workaround signal is available
6 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 2 signals
Technical details provided in 3 signals
Disclosure: 4 classified signals
General: 1 classified signal
Peaked 1d ago at 3 mentions (2026-07-26); latest day: 3
6 total mentions across 2 days

Affected systems

Vendors

microsoft

Products

edge_chromium

Deep dive

Activity timeline6 mentions / 2d

Signal classification3 categories

Disclosure

466.7%

General

116.7%

Patch

116.7%

Referenced assets6 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-26	3	Disclosure2General1
2026-07-27	3	Disclosure2Patch1

Full discourse6 posts

VulDB 🛡@vuldb90d
Disclosure
We have just added an important vulnerability affecting Microsoft Edge (CVE-2026-57989) https://vuldb.com/vuln/383355
Post summary
A new vulnerability (CVE‑2026‑57989) affecting Microsoft Edge has been added to a listing; further details are available at the provided link.
0001097
2.3K followersView on X
Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters91d
Disclosure
CVE-2026-57989 - Information disclosure in Microsoft Edge (Chromium). Origin validation error. #CVSS 7.4. Await patches. #CVE #Microsoft #infosec #cvealert #sysadmin #cybersecurity #redteam #blueteam #ethicalhacking #devsecops #devops #developer #linux #kali #git #github #gitlab https://www.valtersit.com/cve/CVE-2026-57989
Post summary
The post announces a reported information‑disclosure vulnerability in Microsoft Edge, notes its CVSS score, and highlights that a patch is pending.
0000046
993 followersView on X
kawn@kawn202091d
Patch
#microsoftupdate #securityupdate #Edge マイクロソフトが Microsoft Edge for Stable (Version 150.0.4078.99) をリリース． CVE ベースで 3 件の脆弱性に対処．・CVE-2026-57978 ・CVE-2026-57989 ・CVE-2026-57990 https://x.com/kawn2020/status/2081649747753070812
Post summary
The tweet announces a Microsoft Edge stable release that patches CVE-2026-57978, CVE-2026-57989, and CVE-2026-57990.
0000057
92 followersView on X
MalwareObserver@MalwareObserver91d
General
🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-57989](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57989) Origin val... https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57989 #PatchManagement #Vulnerability #CVE
Post summary
The tweet merely references CVE‑2026‑57989 and links to Microsoft’s advisory page, providing no extra details on exploitation or mitigation.
0000036
16 followersView on X
Xavier Rivera@XavierRiveraX91d
Disclosure
Microsoft disclosed CVE-2026-57989 today, a high-severity Edge origin validation flaw that lets attackers disclose information over the network, user interaction required. It affects versions before 150.0.4078.99, CVSS 7.4, advisory already out. https://thecircuitry.to/article/microsoft-edge-origin-validation-flaw-cve-2026-57989-rated-high-severity-ms24ydck
Post summary
Microsoft announced CVE-2026-57989, a high‑severity Edge origin validation flaw (CVSS 7.4) that can disclose information over the network, with an advisory already issued.
0000095
602 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds91d
Disclosure
CVE-2026-57989 Origin Validation Error in Microsoft Edge Chromium-Based Information Disclosure https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-57989
Post summary
This entry announces the discovery of CVE-2026-57989, an Origin Validation Error causing information disclosure in Microsoft Edge Chromium, without providing exploit details, patch information, or evidence of active exploitation.
00000130
4.1K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	edge_chromium	-	-	-

Explore more

Back to dashboard microsoft CVEs edge_chromium vulnerabilities

What researchers are saying

CVE-2026-57989

Hugo | DevOps | Cybersecurity 🇱🇻[verified]@HugoValtersDisclosure

The post announces a reported information‑disclosure vulnerability in Microsoft Edge, notes its CVSS score, and highlights that a patch is pending.

MalwareObserver[verified]@MalwareObserverGeneral

The tweet merely references CVE‑2026‑57989 and links to Microsoft’s advisory page, providing no extra details on exploitation or mitigation.

Xavier Rivera[verified]@XavierRiveraXDisclosure

Microsoft announced CVE-2026-57989, a high‑severity Edge origin validation flaw (CVSS 7.4) that can disclose information over the network, with an advisory already issued.

VulDB 🛡@vuldbDisclosure

A new vulnerability (CVE‑2026‑57989) affecting Microsoft Edge has been added to a listing; further details are available at the provided link.

kawn@kawn2020Patch

The tweet announces a Microsoft Edge stable release that patches CVE-2026-57978, CVE-2026-57989, and CVE-2026-57990.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

This entry announces the discovery of CVE-2026-57989, an Origin Validation Error causing information disclosure in Microsoft Edge Chromium, without providing exploit details, patch information, or evidence of active exploitation.