AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

MicrosoftCVE-2026-66310

Microsoft Edge: unauthorized attacker could disclose information locally

Microsoft

CVE-2026-66310 · Published Aug 4, 2026 · updated Sep 17, 2026

High7.7
Fix: upgrade to 151.0.4129.59 or later
Microsoft advisory

External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.

Affected versions

PackageAffectedFixed in
Microsoft Edge for Android
Product
>= 1.0.0.0, < 151.0.4129.59151.0.4129.59
Details and references
CVSS 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Severity from
the vendor (its own CVE record or advisory)
Weakness
CWE-73

More Microsoft advisories

All Microsoft
Medium 5.4Aug 4Microsoft Edge (Chromium-based): spoofingCVE-2026-66316fixed in 151.0.4129.59Medium 5.4Aug 4Microsoft Edge (Chromium-based): tamperingCVE-2026-66317fixed in 151.0.4129.59High 8.1Aug 4Microsoft Edge (Chromium-based): origin validation errorCVE-2026-66318fixed in 151.0.4129.59High 7.4Aug 4Microsoft Edge (Chromium-based): type confusionCVE-2026-66321fixed in 151.0.4129.59High 7.1Aug 4Microsoft Edge (Chromium-based): spoofingCVE-2026-66322fixed in 151.0.4129.59Medium 6.1Aug 4Microsoft Edge (Chromium-based): server-side request forgeryCVE-2026-66325fixed in 151.0.4129.59