Product:
Microsoft Edge
Summary
User interface misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network. This vulnerability can lead to users being misled by false information presented in the application. Attackers can exploit this flaw to gain unauthorized access to sensitive data.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.3 | CVE-2025-62223 |
Exploitation
To exploit this vulnerability, an attacker must be on the same network as the target user. By manipulating the user interface, the attacker can present misleading information to the user, prompting them to take actions that compromise their security. This requires user interaction, as the victim must be deceived into believing the spoofed information.
Affected Products
- Microsoft Edge for iOS: Vulnerable to spoofing attacks due to UI misrepresentation.
Mitigation
To mitigate this vulnerability, users should ensure they are using the latest version of Microsoft Edge and remain vigilant about the information presented in the application. It is also recommended to avoid interacting with suspicious links or prompts that may appear while using the browser.