cve-2026-57977

The cve-2026-57977 tag covers discussion of a Microsoft Edge Chromium-based spoofing vulnerability and what its security impact means in practice. The available coverage explains how successful exploitation could allow attacker-controlled JavaScript to read some browser information associated with a vulnerable URL and send it to the attacker. It also clarifies the CVSS confidentiality rating of C:L: the issue represents limited information disclosure tied to the abused page or URL context, rather than a full browser takeover, arbitrary file theft, or complete credential dumping. This archive is useful for understanding the vulnerability’s scope, the browser context involved, and why a limited disclosure can still matter for sessions, redirects, tokens, and user trust.