PT-2026-25403 · Chromium+1 · Chromium+1

Puf · Published 2026-03-13 · Updated 2026-04-09 · CVE-2026-0385

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Edge (Chromium-based) for Android (affected versions not specified)

Description A spoofing issue exists in Microsoft Edge (Chromium-based) for Android. This allows for potential phishing campaigns, particularly on mobile devices, and requires no authentication. The issue involves a network vector.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

UI Misrepresentation of Critical Information

Authentication Bypass by Spoofing

RCE

Weakness Enumeration

CWE-451

CWE-290

CWE-20

Related Identifiers

BDU:2026-04688

CVE-2026-0385

Affected Products

Chromium

Edge

References · 10

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0385 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-0385 · Security Note
• https://bdu.fstec.ru/vul/2026-04688 · Security Note
• https://twitter.com/CVEnew/status/2032605810757435579 · Twitter Post
• https://twitter.com/vuldb/status/2032579747172192743 · Twitter Post
• https://t.me/msrcreports/3385 · Telegram Post
• https://twitter.com/0dayPublishing/status/2032670332708860185 · Twitter Post
• https://t.me/msrcreports/3767 · Telegram Post
• https://twitter.com/rahsi_aaka/status/2038875740125762007 · Twitter Post
• https://t.me/CVEtracker/47398 · Telegram Post