Microsoft Edge Spoofing Vulnerability

A spoofing vulnerability has been identified in Microsoft Edge (Chromium-based) version 143.0.3650.88. This vulnerability allows an attacker to manipulate the user interface of extension popups, potentially misleading users about the origin of permission prompts or screen share dialogs. Exploitation requires user interaction, such as opening a specially crafted file or visiting a compromised website.

Impact

Exploitation of this vulnerability could lead to spoofing attacks, where an extension can misrepresent information to the user by overlaying a popup on top of a permission prompt or screen share dialog.

Remediation

Users can download the security update for Microsoft Edge for Android from the Microsoft Edge Release Notes - Security page.