Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.5

Microsoft Edge for Android Displays False Information

CVE-2026-0391 · published 9 months ago
Summary

The user interface of Microsoft Edge for Android does not accurately display information, which could lead to a security risk. This means an attacker might be able to trick users into thinking they are on a secure site, when in fact they are not. To protect your users, update Microsoft Edge on your Android devices to the latest version.

What to do
  • Update microsoft edge_chromium to version 143.0.3650.66 or later.
  • Update microsoft microsoft edge (chromium-based) to version 143.0.3650.66 or later.
Affected software
VendorProductAffected versions
microsoft edge_chromium < 143.0.3650.66
cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:android:*:*
microsoft microsoft edge (chromium-based) < 143.0.3650.66
Original advisory text
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
6.5 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-451User Interface (UI) Misrepresentation of Critical Information
Timeline
Published5 Feb 2026
Updated4 Nov 2026
First seen6 Mar 2026
Sources
CVE-2026-0391 · NVD
CVE-2026-0391 · MITRE
Track software like this
Free during beta