CVE-2025-26643

The UI performs the wrong action in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

Scoring

Severity

MEDIUM

CVSS base score

5.4

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N/E:U/RL:O/RC:C

EPSS probability

0.70%

CWE

CWE-449

Published

2025-03-07

Last modified

2026-03-13

Affected products

• Microsoft Microsoft Edge (Chromium-based)

Weakness type

• CWE-449

Related vulnerabilities

• CVE-2025-49736 — Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
• CVE-2025-21404 — Microsoft Edge (Chromium-based) Spoofing Vulnerability
• CVE-2024-49041 — Microsoft Edge (Chromium-based) Spoofing Vulnerability
• CVE-2024-43577 — Microsoft Edge (Chromium-based) Spoofing Vulnerability
• CVE-2024-38083 — Microsoft Edge (Chromium-based) Spoofing Vulnerability
• CVE-2024-24698 — Zoom Clients - Improper Authentication
• CVE-2023-43585 — Improper access control in Zoom Mobile App for iOS and Zoom SDKs for iOS before version 5.16.5 may...
• CVE-2023-43588 — Insufficient control flow management in some Zoom clients may allow an authenticated user to...

Markdown version · Browse all CVEs