Microsoft Edge for Android Information Disclosure Vulnerability

A vulnerability in Microsoft Edge for Android allows unauthorized attackers to access private personal information over the network. This issue arises from the browser's handling of sensitive data, which can be intercepted by malicious actors.

Impact

Exploitation of this vulnerability could lead to unauthorized disclosure of sensitive information from the user's browser, associated with the vulnerable URL.

Reproduction

To reproduce this vulnerability, a user must visit an attacker-controlled webpage and perform two tap gestures to activate the autofill feature. This interaction allows malicious JavaScript to read sensitive information and send it to the attacker.

Remediation

Users can download the security update for this vulnerability through the Microsoft Edge Security Update Guide.