CVE-2026-0102

3.1 lowEPSS 0.5%

Low (3.1) in microsoft edge chromium. EPSS 0.5% chance of exploitation in the next 30 days.

Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses, email, or phone number metadata.

Severity

CVSS 3.1

3.1 low

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 45% of CVEs (scores of 2026-10-31)
CWE: CWE-359
Published: 2026-02-17
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

microsoft:edge_chromium

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0102

Check your stack JSON