CVE-2026-66310
HighCVSS 7.7Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
In Microsoft Edge for Android, a vulnerability involving external control of file name or path allows an unauthorized attacker to disclose information locally.
Risk Assessment
An attacker may gain access to sensitive data stored locally on the device, compromising information confidentiality.
Recommendation
It is recommended to update Microsoft Edge for Android to the latest version containing the fix for this vulnerability.
Other vulnerabilities in Microsoft Edge for Android
See all- CVE-2025-62224Medium
User interface (UI) misrepresentation of critical information in Microsoft Edge for Android allows an authorized attacker to perform spoofing over a network.
- CVE-2023-38173Medium
A vulnerability in Microsoft Edge for Android allows spoofing, which may lead to user data theft. An attacker can exploit this flaw to impersonate trusted sources.
- CVE-2021-26439Medium
Information disclosure vulnerability in Microsoft Edge for Android. Could allow access to sensitive data.
Original NVD description (English source)
External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS