The vulnerability is a user interface misrepresentation flaw in Microsoft Edge (Chromium-based) for Android that allows an attacker to spoof critical information over a network. The vulnerability falls under CWE-451. An attacker exploiting this flaw could impersonate a legitimate website or application, tricking users into revealing sensitive data or performing unintended actions.

Microsoft Edge for Android is affected. No specific version numbers are listed in the available data; all builds of the Chromium-based Edge for Android may be vulnerable.

The CVSS score of 6.5 indicates moderate severity. The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog. Likely, the attack vector involves network-based delivery of malicious content to the vulnerable browser, and exploiting the UI misrepresentation requires an attacker to present spoofed pages to the user. Based on the description, it is inferred that an attacker would need to embed malicious material into a page viewed by Edge, enabling users to be misdirected into actions that they believe are legitimate.