What’s Vulnerable › Vulnerabilities
CVE-2026-0102: Microsoft Edge (Chromium-based) Defense in Depth Vulnerability
- Severity: low (CVSS 3.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.5% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-02-17 · updated 2026-08-19
- Weakness: CWE-359
Description
Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses, email, or phone number metadata.
Affected products
- Microsoft Edge (Chromium): before 145.0.3800.58 — fixed in 145.0.3800.58
- Microsoft Edge (Chromium): from 1.0.0.0 before 145.0.3800.58 — fixed in 145.0.3800.58
How to fix
Upgrade to a fixed version: Microsoft Edge (Chromium) 145.0.3800.58; Microsoft Edge (Chromium) 145.0.3800.58. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2026-0102 or the next vulnerability affects your stack