CVE-2025-49755

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-49755
User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.

4.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49755 Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:microsoft:edge:*:*:*:*:*:android:*:*
History

15 Aug 2025, 17:49

Type Values Removed Values Added
References () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49755 - () https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-49755 - Vendor Advisory
CPE cpe:2.3:a:microsoft:edge:*:*:*:*:*:android:*:*
First Time Microsoft edge
Microsoft

13 Aug 2025, 17:34

Type Values Removed Values Added
Summary
  • (es) La tergiversación de información crítica en la interfaz de usuario (IU) de Microsoft Edge para Android permite que un atacante no autorizado realice suplantación de identidad a través de una red.

12 Aug 2025, 18:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-08-12 18:15

Updated : 2025-08-15 17:49

NVD link : CVE-2025-49755

Mitre link : CVE-2025-49755

CVE.ORG link : CVE-2025-49755

JSON object : View

Products Affected

microsoft

  • edge
CWE
CWE-451

User Interface (UI) Misrepresentation of Critical Information