CVE-2026-58296CWE-359

Microsoft Edge for Android Information Disclosure Vulnerability

High · published July 3, 2026

CVSS v3.1
7.1
EPSS
1%
Percentile
44.7
In the wild
Unconfirmed
What it is

Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00541 · 44.7th percentile
Weakness
CWE-359 · Exposure of Private Personal Information to an Unauthorized Actor
Published
2026-07-03T20:35Z
EPSS history
Timeline
  • 03 JUL 20:35Z
    Microsoft Edge for Android Information Disclosure Vulnerability
    cvelistv5