The Circuitry
THE CIRCUITRYYour one-stop source for all tech news
HOMETODAYNEWSFEEDEVENTS
BOOKMARKS
RSS
© 2026 The Circuitry
About UsSourcesContactCorrectionsPrivacy
  • Today
  • Feed
  • Events
  • Saved
Scroll for more
Verification
VERIFIEDConfidence: HIGH
Source identified
Claims cross-referenced
No discrepancies found
Fact-check summary

NVD and Feedly confirm the CVE-2026-57989 origin validation error in Microsoft Edge (CVSS 7.4) affecting versions prior to 150.0.4078.99.

Sourcing
1source

via NVD

NVD · track record
11Stories
100%Verified
1130d
All sources →
Markets
MSFT···

Live quote · not investment advice

Home/Tech/Microsoft Edge Origin Validation Flaw CVE-2026-57989 Rated High Severity
VERIFIEDBy Xavier Rivera· ·1 min read

Microsoft Edge Origin Validation Flaw CVE-2026-57989 Rated High Severity

Microsoft disclosed CVE-2026-57989, a high-severity origin validation error in Chromium-based Edge that lets an unauthorized attacker disclose information over a network. The flaw is rated CVSS 7.4 and affects versions before 150.0.4078.99.

Source:NVD
Post
Microsoft Edge Origin Validation Flaw CVE-2026-57989 Rated High Severity
TL;DRAI · 60 sec read

Microsoft disclosed CVE-2026-57989, a high-severity origin validation flaw in its Chromium-based Edge browser. The vulnerability permits an unauthorized attacker to disclose information over a network with a CVSS 3.1 score of 7.4. It affects versions prior to 150.0.4078.99, requiring users to install the available security update from Microsoft.

Microsoft has disclosed a high-severity origin validation error in its Chromium-based Edge browser that can allow an unauthorized attacker to disclose information over a network.

The vulnerability carries a CVSS 3.1 base score of 7.4. The flaw is tracked as CVE-2026-57989. It affects Microsoft Edge versions prior to 150.0.4078.99.
An unauthorized attacker could exploit the flaw to disclose information.

The issue was published to the CVE List and added to the NVD dataset on July 26, 2026. Microsoft Corporation provided the CVSS vector string AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N. This indicates network attack vector, low attack complexity, no privileges required, user interaction required, changed scope, high confidentiality impact, and no integrity or availability impact.
From The CircuitryThe Feed — live briefs across tech, all day.See what’s happening →
The weakness is classified as CWE-346 Origin Validation Error. An unauthorized attacker could exploit the flaw to disclose information. The vulnerability was received from Microsoft Corporation on July 26, 2026 at 2:18:25 PM.
This indicates network attack vector, low attack complexity, no privileges required, user interaction required, changed scope, high confidentiality impact, and no integrity or availability impact.
Details appear in Microsoft's security update guide. The reference is available at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-57989. No additional metrics for CVSS 4.0 or 2.0 were provided by NVD at publication.
The affected product is listed as Microsoft Edge (Chromium-based) version 1.0.0.0 less than 150.0.4078.99. Users should update to the fixed version once available from Microsoft.

EXPERT TAKE

Enterprise security teams should prioritize patching Edge to the 150.0.4078.99 release to mitigate the high confidentiality risk from this network-reachable flaw.

Why this mattersAI · ~100 words

Tap a lens to see what this story means for you.

Reader-supported
DonateBuy me a coffee →Follow@thecircuitry_ →Follow@thecircuitry.to →

Reader-supported · The Brief

Liked this? The Brief brings you the whole day in tech, verified, every morning. Two minutes, free forever.

HELP US IMPROVE
From The Circuitry

See what’s happening right now

The Feed runs all day — short, verified briefs the moment they break.

Open the Feed →
From The Circuitry

Follow @thecircuitry_

Every story we publish, as it happens. No noise between.

Follow on X ↗On Bluesky ↗

Reader-supported

The Circuitry is a passion project I've always wanted to build, and I love the work behind it.

Running it costs real money. APIs, hosting, time. To keep improving the site and growing this into something useful for everyone, those costs have to be covered.

Any contribution is appreciated. If not, no pressure. Thanks for reading.

Buy me a coffee
MicrosoftEdgeVulnerabilitySecurity
More fromNVD
  • Microsoft Edge CVE-2026-57990 Allows External File Access

    Tech · 3h
  • Critical CVE-2026-56163 Hits Azure Kubernetes Service

    Tech · 2d
  • Critical Flaw CVE-2026-60232 Strikes Oracle Coherence Installations

    Tech · 4d
More inTech
  • Microsoft Edge CVE-2026-57990 Allows External File Access

    Tech · 3h
  • SpaceX Targets Tower Catch for Starship on Next Flight

    Tech · 22h
  • Apple Sets 'Upgrade' Leasing Launch and Subscription Price Increases

    Tech · 1d
SupportThe Work

The Circuitry is reader-supported. If you find the daily brief useful, you can buy me a coffee to keep it going.

Buy a coffee →
SubscribeCircuitry Brief

Liked this? The Brief brings you the whole day in tech, verified, every morning. Free forever.

MORE IN TECH

Microsoft Edge CVE-2026-57990 Allows External File Access

Microsoft disclosed CVE-2026-57990, a high-severity vulnerability in Chromium-based Edge that lets unauthorized attackers disclose information by accessing external files or directories over a network. The CVSS 7.4 flaw, published July 26 2026, underscores the need for prompt patching in widely deployed browsers.

SpaceX Targets Tower Catch for Starship on Next Flight

SpaceX plans to attempt catching its Starship spacecraft with mechanical tower arms on the next test flight following a successful ocean landing on Flight 13. The milestone would advance the vehicle's reusability after demonstrating satellite deployment and an in-flight engine restart.

Apple Sets 'Upgrade' Leasing Launch and Subscription Price Increases

Apple is preparing an "Apple Upgrade" leasing program with Klarna for a July 28 debut in the U.S. while lifting Apple Music and related subscription costs. The period also delivered iOS 27 beta 4, plans for roughly a dozen new Macs according to Bloomberg's Mark Gurman, and hands-on impressions of Samsung's Galaxy Z Fold8.