Product:
Microsoft Edge
Summary
User interface misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network. This vulnerability can lead to significant security risks as attackers can deceive users into believing they are interacting with legitimate content. The issue arises from how the application displays information, potentially misleading users.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2026-0391 |
Exploitation
To exploit this vulnerability, an attacker must be on the same network as the target user. By manipulating the user interface, the attacker can present false information to the user, making it appear as though they are interacting with a trusted source. This can lead to unauthorized actions being taken by the user, such as entering sensitive information.
Affected Products
- Microsoft Edge for Android: Vulnerable to spoofing attacks due to UI misrepresentation.
Mitigation
To mitigate this vulnerability, users should ensure they are using the latest version of Microsoft Edge and be cautious of any unexpected prompts or information displayed by the application. Regular updates and security patches from Microsoft should be applied promptly to protect against known vulnerabilities.