- Description
- Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses, email, or phone number metadata.
- Source
- secure@microsoft.com
- NVD status
- Analyzed
- Products
- edge_chromium
CVSS 3.1
- Type
- Primary
- Base score
- 3.1
- Impact score
- 1.4
- Exploitability score
- 1.6
- Vector string
- CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
- Severity
- LOW
- secure@microsoft.com
- CWE-359
- Hype score
- Not currently trending
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7625822C-F0EF-4A29-B90B-7B4E15C8E3C2",
"versionEndExcluding": "145.0.3800.58",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]