EUVD-2026-49870
GHSA-7p27-g9vh-5fqj
Severity by source
AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Primary rating from Vendor (microsoft).
CVSS VectorNVD
Lifecycle Timeline
2DescriptionNVD
Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform tampering over a network.
AnalysisAI
Improper input validation in Edge for Android allows a remote attacker to tamper with data over a network by convincing a user to interact with malicious content. Exploitation requires user interaction and results in low confidentiality and integrity impact, with no availability loss. No public exploit or active exploitation is known; an official vendor patch is available.
More in Microsoft Edge For Android
View allUse-after-free in Microsoft Edge (Chromium-based) enables an authenticated network attacker to achieve remote code execu
External file path control in Microsoft Edge for Android (versions below 151.0.4129.59) allows a local low-privileged at
CVE-2026-26133 is an AI command injection vulnerability in Microsoft 365 Copilot and multiple Microsoft mobile/desktop a
UI spoofing in Microsoft Edge for Android (versions below 148.0.3967.55) allows a remote, unauthenticated attacker with
Spoofing in Microsoft Edge for Android versions below 148.0.3967.55 allows a network-based attacker to misrepresent crit
Same weakness CWE-20 – Improper Input Validation
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today