The vulnerability enables an attacker to manipulate how critical information is displayed in the user interface of Microsoft Edge for Android, allowing the attacker to present false or misleading content to the user. This can lead to the user trusting spoofed pages or data, potentially facilitating phishing, credential theft, or other social‑engineering attacks. The weakness is categorized as CWE‑451, information exposure through UI misrepresentation.

Microsoft Edge (Chromium-based) for Android is affected. No specific version numbers are supplied in the available data, so all current releases of the Android edition of Edge that match the specified vendor/product identifiers are potentially susceptible.

The CVSS score is 6.5, indicating a medium severity flaw. The EPSS score is below 1%, implying that exploitation cases are expected to be very rare at present. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote over a network, with an attacker delivering a malicious or deceptively altered website that the user can visit in the affected browser. No additional conditions or local privilege requirements are specified, so any user of the vulnerable app can be deceived.