CVE-2026-0102

LOW

3.1

Description

Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses, email, or phone number metadata.

CVE Details

CVSS v3.1 Score3.1

SeverityLOW

CVSS VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

Attack VectorNETWORK

ComplexityHIGH

Privileges RequiredNONE

User InteractionREQUIRED

Published2/17/2026

Last Modified2/19/2026

Sourcenvd

Honeypot Sightings0

Affected Products

microsoft:edge_chromium

Weaknesses (CWE)

CWE-359

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0102(secure@microsoft.com)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.