CVE-2026-58296

HighCVSS 7.1

Published: 03/07/2026(UTC)Translated: 04/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.31%

23th percentile — higher than 23% of all known CVEs

Summary

A vulnerability in Microsoft Edge for Android allows an unauthorized attacker to disclose private personal information over a network. The issue stems from improper access restrictions to sensitive data.

Risk Assessment

The organization risks exposure of personal data from users of Edge on Android devices, potentially leading to privacy breaches and legal consequences.

Recommendation

It is recommended to immediately update Microsoft Edge for Android to the latest available version that includes a fix for this vulnerability.

Original NVD description (English source)

Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network.