MicrosoftCVE-2026-66310

Microsoft Edge: unauthorized attacker could disclose information locally

High7.7CVE-2026-66310 · Published Aug 4, 2026 · updated Sep 17, 2026

External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.

Microsoft advisory

Affected versions

Package	Affected	Fixed in
Microsoft Edge for Android Product	>= 1.0.0.0, < 151.0.4129.59	151.0.4129.59

Details and references

CVSS 3.1: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-73

More Microsoft advisories

Date	Advisory	Severity	Fixed in
Aug 4	Microsoft Edge (Chromium-based): spoofing Medium5.4Aug 4 CVE-2026-66316151.0.4129.59	Medium5.4	151.0.4129.59
Aug 4	Microsoft Edge (Chromium-based): tampering Medium5.4Aug 4 CVE-2026-66317151.0.4129.59	Medium5.4	151.0.4129.59
Aug 4	Microsoft Edge (Chromium-based): origin validation error High8.1Aug 4 CVE-2026-66318151.0.4129.59	High8.1	151.0.4129.59
Aug 4	Microsoft Edge (Chromium-based): type confusion High7.4Aug 4 CVE-2026-66321151.0.4129.59	High7.4	151.0.4129.59
Aug 4	Microsoft Edge (Chromium-based): spoofing High7.1Aug 4 CVE-2026-66322151.0.4129.59	High7.1	151.0.4129.59
Aug 4	Microsoft Edge (Chromium-based): server-side request forgery Medium6.1Aug 4 CVE-2026-66325151.0.4129.59	Medium6.1	151.0.4129.59

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.