What is CVE-2022-26905?

CVE-2022-26905 is a security advisory published by Microsoft Security Response Center (MSRC) with Low severity. Microsoft Edge (Chromium-based) Spoofing Vulnerability

Which CVE IDs does CVE-2022-26905 cover?

CVE-2022-26905 covers the following CVE IDs: CVE-2022-26905. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2022-26905?

CVE-2022-26905 has a CVSS v3 base score of 4.3, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2022-26905?

CVE-2022-26905 affects 1 product, including: Microsoft Edge (Chromium-based).

CVE-2022-26905LowCVSS 4.3

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

May 31, 2022

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2022-26905 →

📋 Description

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do? This vulnerability requires that a user have multiple browser instances open of the affected version of Microsoft Edge (Chromium-based), one of which is a specially crafted website hosted by the attacker. The user would need to access the URL of the malicious website and then click a popup displayed on that site.

What is the version information for this release? Microsoft Edge Version Date Released Based on Chromium Version 102.0.1245.30 5/31/2022 102.0.5005.61

According to the CVSS metric, successful exploitation of this vulnerability could lead to some loss of integrity (I:L)? What does that mean for this vulnerability? The user would need to access the URL of the malicious website, which could spoof the content of a legitimate website, and then click a popup displayed on that site.

🎯 Affected products1

Microsoft Edge (Chromium-based)

✅ Remediation

KBRelease Notes (Security Update) — fixed build 102.0.1245.30

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products1

✅ Remediation

🔗 References (2)