CVE-2023-38173
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
A vulnerability in Microsoft Edge for Android allows spoofing, which may lead to user data theft. An attacker can exploit this flaw to impersonate trusted sources.
Risk Assessment
Organizations may be exposed to phishing attacks, potentially resulting in data loss and reputational damage. Users may be misled, increasing the risk of identity theft.
Recommendation
It is recommended to update Microsoft Edge to the latest version and educate users on recognizing potential scams.
Other vulnerabilities in Microsoft Edge for Android
See all- CVE-2026-66310High
In Microsoft Edge for Android, a vulnerability involving external control of file name or path allows an unauthorized attacker to disclose information locally.
- CVE-2021-26439Medium
Information disclosure vulnerability in Microsoft Edge for Android. Could allow access to sensitive data.
Original NVD description (English source)
Microsoft Edge for Android Spoofing Vulnerability
Vulnerability data from NVD (NIST) · CISA KEV · EPSS