CVE-2026-65802
edge_chromium: External Control of File Name or Path (CVE-2026-65802)
highEPSS 0.9%
Affected
- microsoft/edge_chromium
lt *..151.0.4129.59
Description
External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network.
Affected products
The following versions are affected. Older releases of the same product line are also vulnerable unless stated otherwise.
microsoftedge_chromium
151.0.4129.59fixed from 151.0.4129.59Metrics
Show all metrics
Severity
high
89.12
no public PoC known
7.4
Published
2026-08-04 00:17 UTC
CWE-73
Weakness classes (CWE)
CWE-73Base
External Control of File Name or Path
The product allows user input to control or influence paths or file names that are used in filesystem operations.
cwe.mitre.org →
References & sources
Reanalysis & status changes
Chronological NVD audit events for this CVE — reanalyses, CVSS updates, CPE diffs.
- Initial Analysis2026-08-07 10:57 UTC· nvd@nist.gov
- CPE Configuration: AND OR *cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:-:*:*:* versions up to (excluding) 151.0.4129.59 OR cpe:2.3:o:google:android:-:*:*:*:*:*:*:*
- Reference Type: Microsoft Corporation: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-65802 Types: Vendor Advisory
- CVE Modified2026-08-04 16:16 UTC· 134c704f-9b21-4f2e-91b3-4a467353bcc0
- SSVC: {"id":"CVE-2026-65802","role":"CISA Coordinator","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalI…
- New CVE Received2026-08-04 00:17 UTC· secure@microsoft.com
- Affected: Microsoft Edge (Chromium-based)
- Description: External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network.
- CVSS V3.1: AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
- CWE: CWE-73