VulnSocial

CVE-2026-57990Disclosure(microsoft / edge_chromium)

MEDIUMCVSS 7.4 · HIGH

Exploitation ongoing with high activity in latest observed window (3 mentions)

Immediate actions

  • Patch microsoft edge_chromium systems immediately
  • Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

Files or directories accessible to external parties in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

microsoft CVEsBack to dashboard
4.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-552

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • edge_chromium

Threat summary

  • Active exploitation appears in 1 classified signals
  • Patch or workaround signal is available
  • 6 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Active exploitation reported across 1 signal
  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 3 mentions (2026-07-26); latest day: 3
  • 6 total mentions across 2 days

Affected systems

Vendors
microsoft
Products
edge_chromium

1 version affected across 1 product

Deep dive

Activity timeline6 mentions / 2d
01223Mentions · 2026-07-26: 3Mentions · 2026-07-27: 3Active Exploitation · 2026-07-27: 1Patch / Workaround · 2026-07-27: 2Technical Details · 2026-07-26: 2Technical Details · 2026-07-27: 107-2607-27
Signal classification4 categories
Disclosure
233.3%
Patch
233.3%
General
116.7%
Active Exploitation
116.7%
Referenced assets7 URLs
Classification over time
DateTotalLabels
2026-07-263
Disclosure2General1
2026-07-273
Active Exploitation1Patch2
Full discourse6 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-57990 Information Disclosure in Microsoft Edge via Unauthorized File an... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-57990 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4

    Post summary

    The text announces the disclosure of CVE‑2026‑57990, an information‑disclosure vulnerability in Microsoft Edge, with minimal technical details and no links to PoC or exploit code.

    00011134
    4.1K followersView on X
  • VulDB 🛡@vuldb
    Active Exploitation

    A lot of offensive activities were identified targeting Microsoft Edge (CVE-2026-57990) https://vuldb.com/vuln/383356/cti

    Post summary

    The post signals that CVE-2026-57990 is actively exploited against Microsoft Edge, but offers no PoC, exploit code, patch information, or technical specifics.

    01000133
    2.3K followersView on X
  • Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters
    Patch

    CVE-2026-57990 - High-severity information disclosure in Microsoft Edge (Chromium). Unauthorized access to files over network. #CVSS 7.4. No patch yet—restrict network access. #CVE #Microsoft #edge #cybersecurity #infosec #sysadmin #redteam #blueteam #100daysofcybersecurity #cybersecuritytips https://www.valtersit.com/cve/CVE-2026-57990

    Post summary

    The post reports a high‑severity information disclosure flaw in Microsoft Edge (Chromium) with no patch available yet, recommending network access restriction as a workaround.

    0000140
    993 followersView on X
  • Xavier Rivera@XavierRiveraX
    Disclosure

    Microsoft disclosed CVE-2026-57990 today, a high-severity Edge flaw that exposes files or directories to attackers over the network, with user interaction required. It hits every browser version, CVSS 7.4, advisory already out. https://thecircuitry.to/article/microsoft-edge-cve-2026-57990-allows-external-file-access-ms24znxt

    Post summary

    Microsoft has disclosed CVE-2026-57990, a high‑severity Edge vulnerability that allows external file or directory access over the network with user interaction; an advisory has already been issued, though no patch details are provided.

    00001141
    602 followersView on X
  • kawn@kawn2020
    Patch

    #microsoftupdate #securityupdate #Edge マイクロソフトが Microsoft Edge for Stable (Version 150.0.4078.99) をリリース． CVE ベースで 3 件の脆弱性に対処． ・CVE-2026-57978 ・CVE-2026-57989 ・CVE-2026-57990 https://x.com/kawn2020/status/2081649747753070812

    Post summary

    Microsoft released Edge stable version 150.0.4078.99, which patches CVE‑2026‑57978, CVE‑2026‑57989, and CVE‑2026‑57990.

    0000057
    92 followersView on X
  • MalwareObserver@MalwareObserver
    General

    🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-57990](https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57990) Files or d... https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57990 #Vulnerability #CVE #ZeroDay

    Post summary

    The post simply announces CVE-2026-57990 and links to Microsoft’s update guide, without providing any PoC, exploit, patch, or technical details.

    0000037
    16 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appmicrosoftedge_chromium---

Explore more

Back to dashboardmicrosoft CVEsedge_chromium vulnerabilities