This vulnerability (CVE-2026-58297) affects Microsoft Edge (Chromium-based) on Android devices, enabling an unauthorized attacker to disclose private personal information over a network. The CVSS 3.1 base score is 7.1, reflecting high severity due to network attack vector, low attack complexity, no privileges required, but user interaction needed, and high confidentiality impact. Microsoft has published an official fix to remediate this issue, as detailed in their security advisory.

Successful exploitation can lead to the unauthorized disclosure of private personal information, compromising user confidentiality. The integrity and availability impacts are low or none. There are no known exploits in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update for Microsoft Edge (Chromium-based) on Android as provided in the Microsoft security advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58297 to remediate this vulnerability.