Description
Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses, email, or phone number metadata.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Microsoft | Microsoft Edge (Chromium-based) | 1.0.0.0 – < 145.0.3800.58 | 145.0.3800.58 |
Advisories 2
- WID-SEC-2026-0433 Microsoft Edge: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Feb 17, 2026
- MSRC-CVE-2026-0102 Microsoft Edge (Chromium-based) Defense in Depth Vulnerability Microsoft Security Response Center · Feb 17, 2026
References
- Microsoft Edge (Chromium-based) Defense in Depth Vulnerability vendor-advisory patch