CVE-2026-0102: Microsoft Edge Chromium

Low severity, CVSS 3.1. EPSS: 0.5% chance of exploitation in the next 30 days.

Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses, email, or phone number metadata.

Affected products

• Microsoft Edge Chromium: before 145.0.3800.58 (fixed in 145.0.3800.58)

Published 2026-02-17. Last modified 2026-06-17.