A flaw in the Bing Search app for Android causes the user interface to incorrectly display critical information, enabling an unauthorized attacker to perform spoofing over a network. The vulnerability allows the attacker to manipulate how information is presented to the user, potentially leading to users believing false content is authentic. The impact is restricted to information displayed within the app and does not directly grant code execution or system compromise.

Microsoft Bing Search for Android released by Microsoft is impacted. The specific versions affected are not listed in the CVE data, so any version of the app that includes the UI misrepresentation flaw is potentially vulnerable.

The CVSS score of 4.3 indicates low severity. EPSS data is not available and the vulnerability is not listed in the CISA KEV catalog, implying that current exploitation rates are uncertain but likely low. The inferred attack vector is network-based, requiring an attacker to influence network traffic that the Bing app receives. Given the lack of a high‑severity score and absence of known active exploitation, the risk is considered moderate but does not necessitate emergency mitigation. However, due to the potential for user deception, it is prudent for users and organizations to remain vigilant.