Spoofing Vulnerability in Microsoft Edge (Chromium-Based) Browser

Publication date: 2025-12-18

Last updated on: 2026-02-20

Assigner: Microsoft Corporation

Description

Microsoft Edge (Chromium-based) Spoofing Vulnerability

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-18

Last Modified

2026-02-20

Generated

2026-07-06

AI Q&A

2025-12-19

EPSS Evaluated

2026-07-05

NVD

CVE-2025-65046

Affected Vendors & Products

Vendor	Product	Version / Range
microsoft	edge	3.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-451	The user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.

Attack-Flow Graph

Executive Summary

This vulnerability is a spoofing issue in Microsoft Edge (Chromium-based) that could allow an attacker to deceive users by presenting misleading or fake content in the browser.

Impact Analysis

The vulnerability could impact you by allowing attackers to trick you into believing false information or malicious content is legitimate, potentially leading to phishing attacks or other social engineering exploits. However, the impact is limited as the CVSS score indicates low severity with no confidentiality or availability impact.

Hi! I’m here to help you understand CVE-2025-65046. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70