A misrepresentation in the user interface of Microsoft Edge (Chromium‑based) for Android allows an attacker to display false or misleading critical information to the user. The vulnerability is a form of user‑interface spoofing that could cause users to misinterpret displayed data, potentially leading to security or operational mistakes. It falls under the weakness identified as CWE‑451.

All installations of Microsoft Edge for Android based on Chromium are impacted, as no specific version constraints are listed. Every current build should be treated as vulnerable until an official update is applied.

The CVSS score of 5.4 signifies moderate severity, and the vulnerability is not listed in the CISA KEV catalog, suggesting no known active exploitation. EPSS data is not available. Based on the description, the likely attack vector involves an attacker manipulating content over a network or influencing a website that the user visits, leading the browser to render spoofed UI elements. No explicit prerequisites are detailed, so the attack probably requires the user to interact with malicious or compromised web content.