CVE-2026-66310CWE-73

CVE-2026-66310

High · published August 4, 2026

CVSS v3.1
7.7
EPSS
0%
Percentile
29.1
In the wild
Unconfirmed
What it is

External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.

The record
Technical detail
CVSS v3.1
7.7 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00364 · 29.1th percentile
Weakness
CWE-73 · External Control of File Name or Path
Published
2026-08-04T04:17Z
Affected products (1)
ProductVersionsFixed in
microsoft/edge< 151.0.4129.59151.0.4129.59
References (1)
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-66310 · [email protected]
EPSS history
Timeline
  • 03 AUG 22:53Z
    Microsoft Edge for Android Information Disclosure Vulnerability
    cvelistv5