CVE-2026-20942
Microsoft — Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft
Patch Tuesday
8
EVRS 8 of 100 Routine
Monitor
Rank 2,791 of 2,977 tracked
Why it scores 8
Evidence available: 5 of 8 signalsCVSS base score 4.3.
- CISA KEVDid not apply
- RansomwareNo data
- Vendor exploitationDid not apply
- EPSSNo data
- Microsoft Exploitability IndexDid not apply
- Pre-patch disclosureDid not apply
- KEV recencyNo data
- CVSSApplied
The band answers “how soon”, not “how bad”. No data for: Ransomware, EPSS, KEV recency. Why some signals show no data
Fix
No fixed version identified yetNo fix or affected-version data for this CVE yet.
Evidence
Each value with its source| Measure | Value | Source |
|---|---|---|
| CVSS base scoreHow severe the flaw is in itself. It does not say how likely an attack is. | 4.3 | NVD |
| FIRST EPSSFIRST's estimate of the chance this is exploited in the next 30 days, and how that ranks against all CVEs. | Not published | FIRST EPSS |
| Actively exploitedWhether a source of record has confirmed attacks using it in the wild. | Not confirmed | Patch Tuesday |