Low CVSS 4.3 EPSS 0.00386 2025-12 archive

Executive Summary

User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.

Overview

4.3
CVSS MEDIUM
Low
MS Severity
Not Exploited
MS Exploit Status
Exploitation Unlikely
MS Exploit Likelihood
Category Spoofing
Released Dec 9 2025
Last Updated Dec 9 2025
Publicly Disclosed No
CISA KEV Not Listed
Known Exploits None Known
EPSS Score 0.00386 — 0.30251 percentile

CVSS Vector

ATTACK VECTOR
Network
ATTACK COMPLEXITY
Low
PRIVILEGES REQUIRED
None
USER INTERACTION
Required
SCOPE
Unchanged
Temporal Score: 3.8

EPSS Score

0.00386
probability of exploitation in the next 30 days
0.30251 percentile - updated 2026-06-20
View on FIRST.org

Affected Products

1 affected product
Product KB Article Severity Impact Restart Required
Microsoft Edge (Chromium-based) Release Notes (Security Update) Low Spoofing No

Patches

1 patch
Article Type Restart
Release Notes Security Update No

Known Exploits

Acknowledgments