Spoofing Vulnerability in Microsoft Edge for Android by Microsoft
CVE-2026-0385

5MEDIUM

Key Information:

Vendor

Microsoft
Status
Microsoft Edge For Android
Vendor
CVE Published:
13 March 2026

What is CVE-2026-0385?

A spoofing vulnerability exists in Microsoft Edge (Chromium-based) for Android, allowing attackers to manipulate content displayed to the user. Exploiting this vulnerability could lead to unauthorized access to sensitive information or trust issues with the displayed content. Users are encouraged to review the latest updates and apply recommended security patches to mitigate potential risks.

Affected Version(s)

Microsoft Edge for Android 1.0.0 < 146.0.3856.59

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisorypatch

CVSS V3.1

Score:
5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.