Loading story…
Microsoft has disclosed and patched multiple spoofing vulnerabilities affecting Microsoft Edge for Android, including CVE-2026-35429, CVE-2026-42891, CVE-2026-0391, CVE-2025-47967, and the earlier CVE-2024-21387. The issues are described as user interface misrepresentation flaws that could let an unauthenticated attacker present misleading content over a network, potentially tricking users who visit attacker-controlled pages. The repeated classification points to browser UI spoofing risks in the Android version of Edge rather than code execution or privilege escalation.
For CVE-2026-35429, Microsoft said the flaw was rated Moderate with a CVSS v3.1 score of 4.3, required user interaction, and had low attack complexity with no privileges required. Microsoft also stated the vulnerability was not publicly disclosed and not exploited at the time of publication, and released a fix in Microsoft Edge for Android version 148.0.3967.55. The additional CVE entries indicate a broader pattern of Edge for Android spoofing issues being tracked and remediated through Microsoft’s Security Update Guide.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
6 events from the most recent confirmed update back to the earliest known activity.
Microsoft published a Security Update Guide entry for CVE-2026-42891 affecting Chromium-based Microsoft Edge for Android. The reference provides no synopsis, but confirms the advisory was public by this date.
Microsoft disclosed CVE-2026-35429, a moderate spoofing vulnerability in Chromium-based Edge for Android caused by UI misrepresentation (CWE-451), and stated it was not publicly disclosed or exploited. Microsoft said the fix was available in Edge for Android version 148.0.3967.55 released the same day.
Microsoft published a Security Update Guide entry for CVE-2025-47967, describing it as a spoofing vulnerability in Microsoft Edge for Android. The reference contains no further synopsis beyond the advisory listing.
Microsoft added CVE-2026-0391 to its Security Update Guide for Chromium-based Microsoft Edge on Android. No additional technical synopsis is provided in the reference, but the advisory was publicly available by this date.
Microsoft listed CVE-2024-21387 in its Security Update Guide as a spoofing vulnerability affecting Microsoft Edge for Android. The reference indicates public disclosure of the advisory by this date.
Microsoft published a Security Update Guide entry for CVE-2023-38173 affecting Microsoft Edge for Android and classified it as a spoofing vulnerability. The reference provides no additional synopsis beyond confirming the advisory was publicly available by this date.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
7 references tracked. Mallory keeps watching after this page renders.
msrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourcemsrc.microsoft.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft has published a series of Security Update Guide entries for **Microsoft Edge** and related components addressing multiple **spoofing** vulnerabilities, alongside one **tampering** issue and one **security feature bypass** flaw. The affected products span **Edge (Chromium-based)**, **Edge for iOS**, and **Edge WebView2**, with CVEs including `CVE-2022-29147`, `CVE-2022-23264`, `CVE-2022-44688`, `CVE-2023-29334`, `CVE-2023-36026`, `CVE-2023-36029`, `CVE-2024-29049`, `CVE-2024-30055`, `CVE-2024-38093`, `CVE-2024-38221`, `CVE-2025-21262`, and `CVE-2026-33118`. Microsoft also listed **Edge for iOS** spoofing bugs `CVE-2023-36883` and `CVE-2024-30057`, indicating the issue class extends beyond the desktop browser. Additional advisories show Microsoft addressing related but distinct Edge weaknesses, including the **tampering vulnerability** `CVE-2022-23261` and the **security feature bypass vulnerability** `CVE-2025-53791`. While the advisories provided no public synopsis, the volume and recurrence of spoofing-class fixes across several release cycles indicate an ongoing need for organizations to keep Edge, iOS mobile deployments, and embedded **WebView2** runtimes fully patched to reduce exposure to deceptive content, identity misrepresentation, and browser trust-boundary abuse.
Jul 4, 2026
Microsoft disclosed and patched **CVE-2026-32185**, an **Important** spoofing vulnerability in **Microsoft Teams for Android** caused by improper access to files or directories, mapped to `CWE-552`. The flaw could allow an unauthorized **local attacker** to spoof trusted elements in the app and potentially trick users into accepting malicious content or communications. Microsoft assigned the issue a **CVSS 3.1 score of 5.5** and said exploitation requires local access and user interaction, but could still have a high confidentiality impact. Microsoft said the vulnerability was **not publicly disclosed**, **not exploited in the wild**, and had **no public proof-of-concept** at the time of publication, with exploitation assessed as less likely. The company released a fix through the **Google Play Store** and advised users to update **Microsoft Teams for Android** to version **`1.0.0.2026092103` or later**. Microsoft credited **Ofek Levin of Enclave** with responsibly reporting the issue.
Jun 29, 2026
Microsoft Edge (Chromium-based) has received fixes for multiple high-severity vulnerabilities, including remote code execution flaws `CVE-2026-58289`, `CVE-2026-58293`, `CVE-2026-58285`, `CVE-2026-58288`, `CVE-2026-57974`, `CVE-2026-58284`, `CVE-2026-58287`, `CVE-2026-57981`, and `CVE-2026-56645`, as well as the security feature bypass issue `CVE-2026-57983`. Public records attribute the issues to Microsoft and rate them from high to critical severity, with CVSS scores reaching **9.0** for `CVE-2026-58289` and several others scoring in the **8.1-8.8** range. Advisories from Microsoft and HKCERT indicate the flaws affect Microsoft Edge and require prompt patching through the browser's latest security updates. While some metadata inconsistently marks the bugs as not remotely exploitable, the listed attack characteristics for several entries include low attack complexity, no privileges required, and in many cases user interaction, making browser update compliance and rapid deployment a priority for enterprise defenders.
Jul 7, 2026