Microsoft Edge (Chromium-based) fails to properly verify cryptographic signatures, allowing an attacker who can influence network traffic to spoof content. This weakness, identified as CWE‑347, means that malicious actors could masquerade as legitimate sources, potentially undermining user trust and compromising the integrity of data received through the browser.

The vulnerability affects Microsoft Edge (Chromium-based). No specific version details are listed in the advisory, so all installations of this product may be at risk until a vendor fix is released.

The CVSS score of 4.3 indicates a moderate severity. The EPSS score is not provided, and the vulnerability is not listed in the CISA KEV catalog, suggesting that it is not a current high‑profile target. Based on the description, the likely attack vector is a network‑based approach where an attacker can inject or modify traffic to spoof cryptographic signatures, thereby convincing the browser of a fake source. No additional exploitation prerequisites are stated, so the risk remains dependent on an attacker’s ability to control network traffic.