CVE-2026-0102

Published: Feb 17, 2026Modified: Jun 17, 2026

3.1

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Exploitability: 1.6 / Impact: 1.4

Source: secure@microsoft.com (Secondary)

Description

Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses, email, or phone number metadata.

Affected (1)

Products: Microsoft: Edge Chromium

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Edge Chromium	Before 145.0.3800.58

Related CWEs

Exposure of Private Personal Information to an Unauthorized Actor

The product does not properly prevent a person's private, personal information from being accessed by actors who either (1) are not explicitly authorized to access the information or (2) do not have the implicit consent of the person about whom the information is collected.

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0102

Source: secure@microsoft.com

Vendor Advisory

Timeline

No history available yet.