This vulnerability (CVE-2026-58296) affects Microsoft Edge (Chromium-based) on Android devices, where private personal information can be exposed to unauthorized actors over a network. The CVSS 3.1 score is 7.1, reflecting a high severity with network attack vector, low attack complexity, no privileges required, and user interaction needed. The impact includes high confidentiality loss, limited integrity loss, and no availability impact. Microsoft has released an official fix for this vulnerability as documented in their security update guide.

An attacker can disclose private personal information over a network without requiring privileges but with user interaction. The confidentiality impact is high, meaning sensitive user data could be exposed. Integrity impact is low, and availability is not affected. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft to remediate this vulnerability. Refer to the Microsoft security update guide at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58296 for patch details and deployment instructions.