CVE-2026-0385

Published: Mar 16, 2026Modified: Jun 17, 2026

5.0

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

Exploitability: 1.6 / Impact: 3.4

Source: secure@microsoft.com (Secondary)

Description

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

Affected (1)

Products: Microsoft: Edge Chromium

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Edge Chromium	Before 146.0.3856.59

Related CWEs

Authentication Bypass by Spoofing

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

User Interface (UI) Misrepresentation of Critical Information

The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.

References (1)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0385

Source: secure@microsoft.com

Vendor Advisory

Timeline

No history available yet.