Low CVSS 6.5 EPSS 0.00639 2025-05 archive

Executive Summary

User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

Overview

6.5
CVSS MEDIUM
Low
MS Severity
Not Exploited
MS Exploit Status
Less Likely
MS Exploit Likelihood
Category Spoofing
Released May 13 2025
Last Updated May 13 2025
Publicly Disclosed No
CISA KEV Not Listed
Known Exploits None Known
EPSS Score 0.00639 — 0.45802 percentile

CVSS Vector

ATTACK VECTOR
Network
ATTACK COMPLEXITY
Low
PRIVILEGES REQUIRED
None
USER INTERACTION
Required
SCOPE
Unchanged
Temporal Score: 5.7

EPSS Score

0.00639
probability of exploitation in the next 30 days
0.45802 percentile - updated 2026-06-20
View on FIRST.org

Affected Products

1 affected product
Product KB Article Severity Impact Restart Required
Microsoft Edge (Chromium-based) Release Notes (Security Update) Low Spoofing No

Patches

1 patch
Article Type Restart
Release Notes Security Update No

Known Exploits

Acknowledgments

zeeagil