CVE-2026-58300 Absolute path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally

Description

Absolute path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.

Affected products and versions

Product	Affected versions	Fixed in
Microsoft Edge (Chromium-based) 1.0	1.0.0.0 → < 150.0.4078.48	150.0.4078.48

Other CVEs of Microsoft Edge (Chromium-based)

The 301 CVEs of Microsoft Edge (Chromium-based) →

CVE-2026-69446 Incorrect authorization in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally 4.4 Medium CVE-2026-88078 Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to… 4.3 Medium CVE-2026-88077 Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate… 8.8 High CVE-2026-96196 Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a… 8.8 High