Description
User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.
Published: 2025-04-04
Score: 4.7 Medium
EPSS: 1.1% Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2025-9658 User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.
History

Wed, 09 Jul 2025 17:15:00 +0000

Type Values Removed Values Added
First Time appeared Microsoft
Microsoft edge
CPEs cpe:2.3:a:microsoft:edge:*:*:*:*:*:iphone_os:*:*
Vendors & Products Microsoft
Microsoft edge

Fri, 04 Apr 2025 21:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 04 Apr 2025 00:45:00 +0000

Type Values Removed Values Added
Description User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.
Title Microsoft Edge for iOS Spoofing Vulnerability
Weaknesses CWE-451
References
Metrics cvssV3_1

{'score': 4.7, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N/E:P/RL:O/RC:C'}

Subscriptions

Microsoft Edge
cve-icon MITRE

Status: PUBLISHED

Assigner: microsoft

Published:

Updated: 2026-02-13T19:32:47.288Z

Reserved: 2025-03-11T18:19:40.247Z

Link: CVE-2025-29796

cve-icon Vulnrichment

Updated: 2025-04-04T14:26:25.144Z

cve-icon NVD

Status : Analyzed

Published: 2025-04-04T01:15:39.310

Modified: 2025-07-09T16:52:44.693

Link: CVE-2025-29796

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses