CVE-2026-58300CWE-36

Microsoft Edge for Android Information Disclosure Vulnerability

Medium · published July 3, 2026

CVSS v3.1
6.2
EPSS
0%
Percentile
37.7
In the wild
Unconfirmed
What it is

Absolute path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00446 · 37.7th percentile
Weakness
CWE-36 · Absolute Path Traversal
Published
2026-07-03T20:35Z
EPSS history
Timeline
  • 03 JUL 20:35Z
    Microsoft Edge for Android Information Disclosure Vulnerability
    cvelistv5