CVE-2025-47967
BaseFortify
Publication date: 2025-09-16
Last updated on: 2025-10-01
Assigner: Microsoft Corporation
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| microsoft | edge | to 140.0.3485.71 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-357 | The user interface provides a warning to a user regarding dangerous or sensitive operations, but the warning is not noticeable enough to warrant attention. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an insufficient user interface warning in Microsoft Edge for Android that allows an unauthorized attacker to perform spoofing attacks over a network. Essentially, the browser does not adequately warn users about dangerous operations, which can be exploited to deceive users by presenting false or misleading information.
How can this vulnerability impact me? :
The vulnerability can lead to spoofing attacks where an attacker can trick users into believing they are interacting with a legitimate site or operation when they are not. This can result in users being misled or manipulated, potentially causing loss of trust or exposure to further attacks, although it does not directly impact confidentiality or availability.