webview2 security

An attacker could exploit CVE-2026-58524 over the network by hosting a specially crafted website, luring a Microsoft Edge user to visit it, and abusing the browser’s handling of generated page content to create a spoofing condition without needing authentication or local access. Microsoft’s...

Windows’ move toward self-contained, Store-delivered apps has reduced some classic attack paths, but it has also concentrated trust into a smaller set of shared components. In the case of Microsoft Edge WebView2, that shared dependency becomes the real story: a browser engine embedded inside...

Microsoft Edge’s latest Stable Channel update is a good example of how the browser has evolved into something much broader than a simple window to the web. Version 147.0.3912.60 lands on Microsoft’s four-week release cycle, and while the headline is “just another browser patch,” the payload is...