PT-2026-25403 · Chromium+1 · Chromium+1

Puf · Publicado 2026-03-13 · Atualizado 2026-04-09 · CVE-2026-0385

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Edge (Chromium-based) for Android (affected versions not specified)

Description A spoofing issue exists in Microsoft Edge (Chromium-based) for Android. This allows for potential phishing campaigns, particularly on mobile devices, and requires no authentication. The issue involves a network vector.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

UI Misrepresentation of Critical Information

Authentication Bypass by Spoofing

RCE

Enumeração de Fraquezas

CWE-451

CWE-290

CWE-20

Identificadores relacionados

BDU:2026-04688

CVE-2026-0385

Produtos afetados

Chromium

Edge

Referências · 10

• https://twitter.com/CVEnew/status/2032605810757435579 · Publicação no Twitter
• https://twitter.com/vuldb/status/2032579747172192743 · Publicação no Twitter
• https://t.me/msrcreports/3385 · Publicação no Telegram
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0385 · Aviso do Fabricante
• https://twitter.com/0dayPublishing/status/2032670332708860185 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2026-0385 · Nota de Segurança
• https://bdu.fstec.ru/vul/2026-04688 · Nota de Segurança
• https://t.me/msrcreports/3767 · Publicação no Telegram
• https://twitter.com/rahsi_aaka/status/2038875740125762007 · Publicação no Twitter
• https://t.me/CVEtracker/47398 · Publicação no Telegram