This vulnerability in Microsoft Edge for Android allows information disclosure due to a CWE-36 path traversal weakness. It affects versions up to and including 150.0.4078.48. The Microsoft Security Response Center has published an advisory identifying this issue but has not provided a CVSS score or patch information. The vulnerability could potentially allow an attacker to access sensitive information improperly. No known exploits have been reported.

The vulnerability could lead to unauthorized disclosure of information within affected versions of Microsoft Edge for Android. The exact nature and extent of the information disclosed are not detailed in the available data. No known exploitation in the wild has been reported, which may indicate limited or no active exploitation at this time.

Patch status is not yet confirmed — check the Microsoft Security Response Center advisory for current remediation guidance. Since no patch or workaround information is provided, users should monitor official Microsoft channels for updates. No vendor advisory states that no action is required or that the issue is already mitigated.