Microsoft Edge (Chromium-based) contains a user interface misrepresentation flaw that lets an unauthorized attacker spoof critical information presented to the user. An attacker who can influence what is displayed in the browser could masquerade as a legitimate entity or display false data, potentially misleading the user into taking an unintended action. The vulnerability impacts the integrity of the information the user receives and may expose the user to phishing or other deceptive attacks.

The vulnerability affects Microsoft Edge (Chromium‑based) on iOS devices. No specific version information has been disclosed, so all installations of the affected browser should be considered potentially vulnerable until a patch is released.

The CVSS score of 4.3 indicates a moderate risk, while the EPSS score of less than 1% suggests a low likelihood of exploitation at this time. The vulnerability is not listed in CISA’s KEV catalog. Based on the description, the likely attack vector is remote, occurring over a network when the attacker can manipulate the content presented in the browser on an iOS device. No special prerequisites beyond the ability to influence the UI are stated, so the threat can affect any user who accepts the spoofed information without additional safeguards.