CVE-2026-0102

Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses, email, or phone number metadata.

Score

CVSS 3.1 3.1 Low

Status

Analyzed - secure@microsoft.com

Published

2026-02-17

Last modified

2026-08-19

Weaknesses

CWE-359

Affected products

• Edge Chromium (Microsoft)

References

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0102