CVE-2026-56646

47th percentile — higher than 47% of all known CVEs

A vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose sensitive information. The attack can be performed remotely over a network, leading to spoofing.

The organization is at risk of phishing attacks and impersonation of trusted websites, potentially leading to credential theft or other sensitive data compromise.

Immediately update Microsoft Edge to the latest version provided by the vendor. Implement policies to block unknown or suspicious websites.