Description
Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses, email, or phone number metadata.
Metrics
CVSS 3.1 3.1/10
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:NWeakness enumeration
Affected software
No affected versions have been published.
Timeline
- Published
- Feb 17, 2026
- Last modified
- Jun 17, 2026
- NVD status
- Analyzed