Product:
Microsoft Edge
Summary
User interface misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network. This vulnerability can lead to users being misled by false information presented in the application. Attackers can exploit this flaw to gain trust and manipulate user actions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.3 | CVE-2026-35429 |
Exploitation
To exploit this vulnerability, an attacker must be on the same network as the target user. By manipulating the user interface, the attacker can present misleading information that appears legitimate. This can trick users into providing sensitive information or performing actions that compromise their security.
Affected Products
- Microsoft Edge for Android: Vulnerable to spoofing attacks due to UI misrepresentation.
Mitigation
To mitigate this vulnerability, users should ensure they are using the latest version of Microsoft Edge and remain cautious of any unexpected prompts or information displayed in the application. Regularly updating software and being aware of potential phishing attempts can help reduce the risk of exploitation.