This vulnerability permits an attacker to bypass a security feature over a network due to improper input validation. The weakness is classified as CWE‑20, reflecting an input validation flaw that undermines browser defenses.

Affected systems include Microsoft Edge (Chromium-based) on all platforms where it is installed. No specific version range is cited; therefore, system administrators should assess all current installations for vulnerability.

The CVSS score is 5.4, indicating medium severity. EPSS score is <1%, and the vulnerability is not listed in CISA's KEV catalog, suggesting no current widespread exploitation. The attack vector is not explicitly documented; based on the description, it is inferred that the likely vector is remote over a network via a malicious web page or other compromised content. Administrators should evaluate whether their environments are exposed to such content.