May 2026: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
CVE-2026-41107 Published on May 12, 2026

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

Vendor Advisory NVD

Weakness Type

External Control of File Name or Path

The software allows user input to control or influence paths or file names that are used in filesystem operations.


Products Associated with CVE-2026-41107

Want to know whenever a new CVE is published for Microsoft Edge Chromium? stack.watch will email you.

Microsoft Edge Chromium
 

Affected Versions

Microsoft Edge (Chromium-based):