CVE-2026-66310
HighCVSS 7.7Exploitation Probability (EPSS)
Low risk33th percentile - higher than 33% of all known CVEs
Summary
In Microsoft Edge for Android, a vulnerability involving external control of file name or path allows an unauthorized attacker to disclose information locally.
Risk Assessment
An attacker may gain access to sensitive data stored locally on the device, compromising information confidentiality.
Recommendation
It is recommended to update Microsoft Edge for Android to the latest version containing the fix for this vulnerability.
Other vulnerabilities in Microsoft Edge for Android
See all- CVE-2023-38173Medium
A vulnerability in Microsoft Edge for Android allows spoofing, which may lead to user data theft. An attacker can exploit this flaw to impersonate trusted sources.
- CVE-2021-26439Medium
Information disclosure vulnerability in Microsoft Edge for Android. Could allow access to sensitive data.
Original NVD description (English source)
External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.