Disclosure summary
Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses, email, or phone number metadata.
Source-reported weakness categories
CWE-359
Source-specific records & product guidance
Sources retain their own attribution and scoring. Follow the original record to confirm affected versions, fixed releases, and configuration conditions.
Microsoft Security Updates (CVRF) · 2026-Feb
Open original source · Updated Feb 17, 2026
Microsoft Edge (Chromium-based) Defense in Depth Vulnerability
Maximum of vendor-reported product scores; products and fixed builds are associations, not a universal affected-version statement.
Microsoft maximum product score: 3.1
| Vendor | Product / association | Version / bounds |
|---|---|---|
| Microsoft update guide | Microsoft Edge (Chromium-based) | (MSRC status code 3) |
Vendor remediation references
- Release Notes · build 145.0.3800.58 · product IDs 11655
- Vendor guidance · product IDs 11655
Original records & references
- NIST NVD record
- CVE Program record
- msrc.microsoft.com — Vendor advisory
PUBLISHED 2026-02-17T03:00:00-05:00
MODIFIED 2026-02-17T03:00:00-05:00
INGESTED 2026-10-08T12:45:18-04:00