CVE-2026-0102 LOW

CVE-2026-0102: Microsoft Edge (Chromium-based) Defense in Depth Vulnerability

Vendor Microsoft
Product Microsoft Edge (Chromium-based)
Weakness CWE-359
Published February 17, 2026
Last update May 11, 2026

CVSS base score

3.1/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction Required
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C

What the vulnerability does

01Description

Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses, email, or phone number metadata.

Key dates

02Disclosure timeline

February 17, 2026 CVE published
May 11, 2026 Record updated