The vulnerability in Microsoft Edge (Chromium-based) allows an attacker to spoof elements presented to the user, resulting in the disclosure of sensitive information that the attacker can intentionally reveal. This flaw falls under CWE-451. Based on the description, the impact is limited to data that the attacker can fabricate, and there is no indication that the vulnerability enables code execution or denial of service.

Microsoft Edge (Chromium-based) is the affected product. No explicit version numbers were supplied in the CNA listing, which implies the issue may affect the current release series at the time of the advisory.

The CVSS score of 4.3 indicates a low overall risk, and the EPSS rating of less than one percent suggests that exploitation is unlikely in the near term. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the probable attack vector requires user interaction, such as visiting a malicious web page or engaging with a crafted link, and no direct exploitation path has been disclosed.