Microsoft Edge (Chromium‑based) for Android contains a UI misrepresentation flaw that allows an unauthorized attacker to spoof critical information over a network. The vulnerability can mislead users into believing they are interacting with a legitimate page or service, potentially enabling phishing or other social‑engineering attacks. The flaw is classified as a UI spoofing weakness and carries a CVSS score of 4.3, indicating moderate potential impact on user trust and privacy.

Microsoft Edge for Android on Android devices. No specific version information is given; the issue may affect any deployed build prior to the latest security update listed by Microsoft.

The CVSS score of 4.3 suggests a low to moderate severity. The EPSS score of 0.00064 indicates a very low probability of exploitation, and the vulnerability is not included in CISA’s KEV catalog, implying no known widespread exploitation. The likely attack vector is through network traffic that delivers crafted content triggering the UI misrepresentation. Successful exploitation would require the user to interact with the malicious content and rely on the misleading interface to perform unintended actions. Until a public exploit or more detailed information emerges, the threat remains theoretical.