CVE-2026-40416

Published: Mag 12, 2026 Last Modified: Mag 12, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 4,3
Attack Vector: network
Attack Complexity: low
Privileges Required: none
User Interaction: required
Scope: unchanged
Confidentiality: none
Integrity: low
Availability: none

Description

AI Translation Available

User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

451

User Interface (UI) Misrepresentation of Critical Information

Draft
Common Consequences
Security Scopes Affected:
Non-Repudiation Access Control
Potential Impacts:
Hide Activities Bypass Protection Mechanism
Applicable Platforms
All platforms may be affected
View CWE Details
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40416