CVE-2025-29796
User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 4.7
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N/E:P/RL:O/RC:C
- EPSS probability
- 0.59%
- CWE
- CWE-451
- Published
- 2025-04-04
- Last modified
- 2026-08-10
Affected products
- Microsoft Microsoft Edge for iOS
Weakness type
Related vulnerabilities
- CVE-2026-79011 — UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engi
- CVE-2020-9236 — There is an improper interface design vulnerability in Huawei product. A module interface of the impated product does no
- CVE-2024-52277 — PDF Document Spoofing in DocuSeal
- CVE-2024-52276 — PDF Document Spoofing in DocuSign
- CVE-2024-52271 — PDF Document Spoofing in Documenso
- CVE-2024-52270 — PDF Document Spoofing in DropBox Sign(HelloSign)
- CVE-2024-52269 — AI Assistant PDF Document Spoofing in DocuSign
- CVE-2022-39258 — mailcow-dockerized critical information misrepresentation can lead to phishing attacks through Swagger UI