CVE-2026-0102LowCVSS 3.1

Microsoft Edge (Chromium-based) Defense in Depth Vulnerability

Published
February 17, 2026
Last Modified
—

🔗 CVE IDs covered (1)

📋 Description

Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses, email, or phone number metadata.

🎯 Affected products1

  • Microsoft Edge (Chromium-based)

✅ Remediation

KBRelease Notes (Security Update) — fixed build 145.0.3800.58

🔗 References (2)