Product:
Web Browser
Summary
Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses, email, or phone number metadata.
Details
| Severity | Base Score | CVE |
|---|---|---|
| LOW | 3.1 | CVE-2026-0102 |
Exploitation
To exploit this vulnerability, an attacker would need to create a malicious webpage that prompts the user to interact with it. By enticing the user to tap on the page twice, the attacker could trigger the autofill feature, leading to the unintended disclosure of sensitive information stored in the browser’s autofill settings.
Affected Products
- Web Browser: Vulnerable to autofill data disclosure under specific user interactions.
Mitigation
Users are advised to be cautious when interacting with unknown or suspicious webpages. Disabling autofill features in browser settings can also help mitigate the risk of data exposure.