VULNERABILITY INTELLIGENCE

CVE-2026-0102

CVSS score3.1 LOW
EPSS probability0.53%
CISA KEVNot currently listed
Published2026-02-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C

Description

Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses, email, or phone number metadata.

Weakness classification

  • CWE-359: Exposure of Private Personal Information to an Unauthorized Actor

Primary references