This vulnerability (CVE-2026-0102) in Microsoft Edge (Chromium-based) involves the exposure of private personal information due to autofill data being populated on a malicious webpage after two consecutive taps, possibly without explicit user consent. The autofill data exposed can include addresses, email, or phone number metadata. The CVSS score is 3.1 (low severity), reflecting limited impact and requiring user interaction. Microsoft has released an official fix to remediate this issue.

The impact is limited to the potential unauthorized disclosure of autofill data stored in the browser, such as addresses, email addresses, or phone number metadata. There is no indication of integrity or availability impact. Exploitation requires user interaction (two taps) and conditions that trigger autofill. No known exploits are reported in the wild.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft as detailed in their advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0102 to remediate this vulnerability.