CVE-2024-26196: 
NixOS vulnerability analysis and mitigation

Microsoft Edge for Android (Chromium-based) contains an Information Disclosure Vulnerability identified as CVE-2024-26196. The vulnerability was discovered and reported to Microsoft, with the CVE being created on February 14, 2024. This security issue affects Microsoft Edge for Android versions up to (excluding) 122.0.2365.63 (NVD, CVE Mitre).

The vulnerability has been assigned a CVSS v3.1 Base Score of 4.3 (MEDIUM) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N. The vulnerability is associated with CWE-259 (Use of Hard-coded Password) according to Microsoft's assessment (NVD).

This vulnerability could potentially lead to information disclosure in Microsoft Edge for Android. The CVSS scoring indicates that while the vulnerability has low complexity and requires no privileges, it does require user interaction and can only result in low confidentiality impact with no effects on integrity or availability (NVD).

Microsoft has addressed this vulnerability in Microsoft Edge version 122.0.2365.63. Users are advised to update their Microsoft Edge for Android installations to this version or later to mitigate the security risk (Microsoft Edge Release Notes).