CVE-2025-26643

published 2025-03-07

CVE-2025-26643: The UI performs the wrong action in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

medium 5.4 CVSS 3.1

AV N AC L PR N UI R S U C L I L A N

The UI performs the wrong action in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
microsoft	edge_chromium	< 134.0.3124.51	134.0.3124.51
microsoft	microsoft_edge	>= 1.0.0.0 < 134.0.3124.51	134.0.3124.51
msrc	microsoft_edge	—	—

CWE-449