4.6mediumMedium

CVE-2021-26439

Microsoft Edge

Microsoft Edge for Android Information Disclosure Vulnerability

Exploitation status

  • A vendor advisory or patch reference has been published.

What the metrics mean

  • It is requires physical access to the device.
  • For an attacker who can reach it, no special conditions are needed to exploit it.
  • To exploit it, no account is needed.
  • Beyond that, no action by a user is required.

Scoring

CVSS
4.6 (v3.1)
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Assigned by
secure@microsoft.com

Dates

Published
2021-09-02
Last modified
2026-08-10
Sources
NVD

Affected products

  • Microsoft Edge- 93.0.961.38
  • Google Androidall versions

As listed in the NVD configuration data. Not a statement about your estate.

References