This vulnerability (CVE-2026-58297) affects Microsoft Edge (Chromium-based) on Android devices. It allows an unauthorized attacker to disclose private personal information over a network, violating user privacy. The CVSS v3.1 base score is 7.1, reflecting a high severity with network attack vector, low attack complexity, no privileges required, and user interaction needed. The impact includes high confidentiality loss, low integrity impact, and no availability impact. Microsoft has published an official fix to remediate this issue.

The vulnerability can lead to unauthorized disclosure of private personal information to attackers over a network, potentially compromising user privacy. There is no indication of integrity or availability impact beyond the confidentiality breach. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Microsoft Edge (Chromium-based) on Android as detailed in the vendor advisory (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-58297).