CVE-2026-66310

Microsoft · Published July 31, 2026

7.7

CVSS v3.1

HIGH

Patch availableGet patch

Description

Microsoft Edge for Android Information Disclosure Vulnerability. External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.

Affected Products

Microsoft Edge for Android

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N/E:U/RL:O/RC:C