CVE-2026-65802
published 2026-08-04CVE-2026-65802: External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network.
PriorityP344high7.4CVSS 3.1
AVNACLPRNUIRSCCHINAN
EPSS
0.92%
60.0th percentile
External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | edge_chromium | < 151.0.4129.59 | 151.0.4129.59 |
| microsoft | microsoft_edge | >= 1.0.0.0 < 151.0.4129.59 | 151.0.4129.59 |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network.
ghsa_unreviewed·2026-08-04
CVE-2026-65802 [HIGH] CWE-73 External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network.
External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network.
VulDB
Microsoft Edge up to 150.0.4078.99 path traversal
vuldb·2026-08-04·CVSS 7.4
CVE-2026-65802 [HIGH] Microsoft Edge up to 150.0.4078.99 path traversal
A vulnerability described as problematic has been identified in Microsoft Edge. Affected by this vulnerability is an unknown functionality. Executing a manipulation can lead to path traversal.
This vulnerability is handled as CVE-2026-65802. The attack can be executed remotely. There is not any exploit available.
Upgrading the affected component is recommended.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-08-04
Published