This vulnerability (CVE-2026-58296) in Microsoft Edge (Chromium-based) for Android involves the exposure of private personal information to unauthorized actors over a network. The issue is identified as CWE-359, which relates to the exposure of sensitive data to unauthorized entities. The CVSS 3.1 base score is 7.1, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, and high confidentiality impact. Microsoft has released an official fix for this vulnerability as indicated by the remediation level and vendor advisory.

An attacker can disclose private personal information over a network without requiring privileges but with user interaction. The confidentiality impact is high, meaning sensitive data could be exposed to unauthorized parties. Integrity impact is low and availability is not affected. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Microsoft Edge (Chromium-based) on Android to remediate this vulnerability. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58296 for the update details and installation instructions.