CVE-2026-85330
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk29th percentile - higher than 29% of all known CVEs
Summary
Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.
Risk Assessment
Bypassing a security feature may expose mobile users to unsafe content or actions without proper safeguards.
Recommendation
Update Microsoft Edge for Android to the latest patched version and enforce app updates on mobile devices.
Other vulnerabilities in Microsoft Edge for Android
See all- CVE-2026-66310High
In Microsoft Edge for Android, a vulnerability involving external control of file name or path allows an unauthorized attacker to disclose information locally.
- CVE-2025-62224Medium
User interface (UI) misrepresentation of critical information in Microsoft Edge for Android allows an authorized attacker to perform spoofing over a network.
- CVE-2023-38173Medium
A vulnerability in Microsoft Edge for Android allows spoofing, which may lead to user data theft. An attacker can exploit this flaw to impersonate trusted sources.
- CVE-2021-26439Medium
Information disclosure vulnerability in Microsoft Edge for Android. Could allow access to sensitive data.
Original NVD description (English source)
Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS