External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
CVSS Details
CVSS Score
7.4
Severity
HIGH
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
Configurations (Affected Products)
No configuration data available.
Microsoft Edge (Chromium-based) (具体受影响版本请参考微软安全公告)
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
<!-- Conceptual Proof of Concept for CVE-2026-41107 -->
<!-- This code demonstrates the concept of external control of file name/path -->
<!DOCTYPE html>
<html>
<head>
<title>PoC CVE-2026-41107</title>
</head>
<body>
<script>
// Simulate attacker-controlled input
var malicious_path = "../../../Windows/System32/config/SAM";
// Attempt to access the file using a vulnerable API pattern
// Note: In a real scenario, this would exploit the specific vulnerability in Edge
try {
// Hypothetical vulnerable function call
// vulnerableLoadFile(malicious_path);
console.log("Attempting to access: " + malicious_path);
alert("PoC: Attempting to access local file path via browser.");
} catch (e) {
console.log("Exploit failed or blocked: " + e.message);
}
</script>
</body>
</html>