This vulnerability permits an attacker to bypass a security feature in Microsoft Edge (Chromium-based) over a network due to improper input validation. The bypass could allow the execution of code or the loading of malicious content without triggering normal safeguards. The weakness is classified as CWE‑20, reflecting an input validation flaw that undermines browser defenses.

Affected systems include Microsoft Edge (Chromium-based) on all platforms where it is installed. No specific version range is cited; therefore, system administrators should assess all current installations for vulnerability.

The CVSS score is 5.4, indicating a medium likelihood of significant impact if exploited. EPSS data is not available and the vulnerability is not listed in CISA's KEV catalog, suggesting no current widespread exploitation. The attack vector is not explicitly documented; the likely vector is remote over a network via a malicious web page or other compromised content, inferred from the fact that the flaw involves a browser security feature bypass. Administrators should evaluate whether their environments are exposed to such content.