Log In Get API Key

3.1Low

CVE-2025-65046Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Microsoft Edge for Android Published: 2025-12-19 01:01 (10 months ago)

Description

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Weakness (CWE): CWE-451 CWE-290

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

Vendor	Product	Versions
microsoft	edge	1.0.0 – < 143.0.3650.88
microsoft	edge chromium	< 143.0.3650.88
Microsoft	Microsoft Edge for Android	1.0.0 – < 143.0.3650.88

References and patches

Microsoft Edge (Chromium-based) Spoofing Vulnerability vendor-advisorypatchVendor Advisory

CPE matches (NVD) (1)

cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:android:*:* < 143.0.3650.88

CVSS score

3.1Low

Source: microsoft · CVSS 3.1

Attack vector: Network
Attack complexity: High
Privileges required: None
User interaction: Required
Scope: Unchanged
Confidentiality: None
Integrity: Low
Availability: None

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C

All scores (2)

cna	CVSS 3.1	3.1Low
secure@microsoft.com	CVSS 3.1	3.1Low

EPSS (chance of exploitation in 30 days)

0.28%

higher than 20% of all CVEs

CISA assessment (SSVC)

Exploitation: none
Automatable: no
Technical impact: partial

Timeline

ID reserved2025-11-13
Published2025-12-19 01:01
Reached IP-DB2026-10-25 00:00
Last updated2026-10-01 02:10

Assigned by (CNA): microsoft
NVD status: Modified

View at source: CVE.org · NVD

Get told when these products get a new vulnerability

Turn on email alerts

Free · with an account · switch off any time