Loading vulnerability…
Spoofing in Microsoft Edge for Android
CVE-2026-35429 is a spoofing vulnerability in Chromium-based Microsoft Edge for Android caused by user interface misrepresentation of critical information. Microsoft classifies the issue as CWE-451. The flaw can be triggered when an attacker hosts specially crafted content and convinces a user to open it in Edge for Android. Successful exploitation causes the browser UI to misrepresent critical information to the user, enabling network-based spoofing and potentially exposing some sensitive information. Microsoft’s published details do not identify the specific vulnerable function or code path.
What it means and what to do now: patch path, interim mitigations, and the assume-compromise checklist.
What an attacker gets, and what they’ve been doing with it.
Successful exploitation allows an unauthorized remote attacker to spoof trusted content or browser-presented information to the victim. According to Microsoft’s assessment, the primary security impact is low confidentiality impact, including the possibility of viewing some sensitive information. Microsoft states there is no integrity impact and no availability impact.
If you can’t patch tonight, do this now.
If immediate patching is not possible, reduce exposure by limiting user access to untrusted links and attacker-controlled web content on affected Edge for Android installations. Because exploitation requires user interaction, user awareness measures against clicking links delivered via email or instant messaging may reduce risk. The authoritative mitigation is to update to the fixed version.
Patch, then assume compromise.
Apply the vendor-provided fix by updating Microsoft Edge for Android to version 148.0.3967.55 or later. Microsoft states this release, published on 2026-05-11, contains the official fix for CVE-2026-35429.
No public exploits tracked yet. Mallory keeps watching.
Products and vendors Mallory has correlated with this vulnerability. Open in Mallory to drill down to specific CPE configurations and version ranges.
2 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.