Product
CVE-2026-39823 is a cross-site scripting (XSS) vulnerability in Microsoft's html/template component caused by a bypass of meta content URL escaping, potentially allowing an attacker to inject malicious scripts into web pages.