Sazzad Mahmud Tomal

تتعلق المشكلة بأخطاء في عرض المعلومات عبر واجهة المستخدم، مما يسمح لمهاجم غير مصرح له بتنفيذ هجمات انتحال الهوية عبر الشبكة. ويمكن استغلال هذه الثغرة من قبل مهاجم عن بُعد.

Name of the Vulnerable Software and Affected Versions: Microsoft Edge (Chromium-based) versions up to 131.0.2903.63 Description: A spoofing vulnerability exists in Microsoft Edge, which is based on Chromium. The vulnerability may allow a remote attacker to conduct spoofing attacks by exploiting errors in the user interface's representation of information. The issue can cause the UI to perform wrong actions. Recommendations: For versions up to 131.0.2903.63, upgrade the affected component immediately to resolve the issue. At the moment, there is no information about additional mitigation measures for this vulnerability.

The Microsoft Edge browser, specifically the Chromium-based version, is affected by a spoofing issue that can be remotely exploited. Users should upgrade Microsoft Edge to the latest version as soon as possible to mitigate this issue.

The issue is related to insufficient validation of untrusted input in the Safe Browsing service, which could allow a remote attacker to bypass discretionary access control via a malicious file. This could be achieved if the attacker convinces a user to engage in specific UI gestures. The vulnerability may also lead to a denial of service.

The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to conduct spoofing attacks. There are no known exploits yet, but it is recommended to patch as soon as possible for defense-in-depth.

The issue is related to missing proper interaction for opening deeplinks in Samsung Internet, allowing remote attackers to open an application without proper interaction.

The issue is related to errors in presenting information to the user interface, which can allow a remote attacker to conduct spoofing attacks.

The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to perform a spoofing attack.