PT-2026-1836 · Microsoft · Edge For Android

Published 2026-01-07 · Updated 2026-02-02 · CVE-2025-62224

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Microsoft Edge for Android (affected versions not specified)

Description The user interface in Microsoft Edge for Android exhibits a misrepresentation of critical information, potentially enabling an authorized attacker to conduct spoofing attacks over a network. This issue allows manipulation of critical visual elements.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

UI Misrepresentation of Critical Information

Weakness Enumeration

CWE-451

Related Identifiers

CVE-2025-62224

Affected Products

Edge For Android

References · 9

• https://osv.dev/vulnerability/CVE-2025-62224 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-62224 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62224 · Vendor Advisory
• https://twitter.com/0dayPublishing/status/2009334538988618153 · Twitter Post
• https://t.me/CVEtracker/41654 · Telegram Post
• https://t.me/cveNotify/148007 · Telegram Post
• https://t.me/cveNotify/150623 · Telegram Post
• https://twitter.com/vuldb/status/2009161938929066027 · Twitter Post
• https://twitter.com/CVEnew/status/2009150007031824818 · Twitter Post