Microsoft Edge Spoofing Vulnerability on Android

A spoofing vulnerability has been identified in Microsoft Edge for Android, specifically in version 140.0.3485.71. This vulnerability arises from insufficient user interface warnings regarding dangerous operations, which could allow an unauthorized attacker to perform spoofing over a network. The issue requires user interaction, as the user must click on a specially crafted URL for the attack to be successful.

Impact

Exploitation of this vulnerability could lead to spoofing, allowing attackers to impersonate users or manipulate user interactions.

Remediation

Users can download the security update for this vulnerability from the Microsoft Edge release notes and security update guidance.