Skip to content
CVE PROGRAM SOURCE RECORD3.1 Low

CVE-2026-0102

Microsoft Edge (Chromium-based) Defense in Depth Vulnerability

Description

Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses, email, or phone number metadata.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Microsoft Edge (Chromium-based)

  • 1.0.0.0 to < 145.0.3800.58affected

References