MEDIUM✓ PATCH🇵🇱 Wersja polska

CVE-2025-47967

CVSS 4.7v3.1pub. 2025-09-16upd. 2025-10-01

Insufficient ui warning of dangerous operations in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N

  • Microsoft Edge

    APP
    Microsoft
    < 140.0.3485.71
🟢
PATCH AVAILABLE
Vendor update available. Deploy in standard maintenance cycle.
CWE
References

Related vulnerabilities

CVE-2024-7971CRITICAL9.6⚠ KEVPL ✓same product

Type confusion w V8 (Google Chrome/Edge) umożliwiający heap corruption

CVE-2022-4135CRITICAL9.6⚠ KEVPL ✓same product

Heap buffer overflow w GPU w Google Chrome — sandbox escape

CVE-2015-0313CRITICAL9.8⚠ KEVPL ✓same product

Use-after-free w Adobe Flash Player umożliwiający RCE

CVE-2015-0311CRITICAL9.8⚠ KEVPL ✓same product

RCE w Adobe Flash Player — aktywnie exploitowana podatność 0-day

CVE-2019-0938CRITICAL9.0PL ✓same product

Microsoft Edge — privilege escalation poprzez ucieczkę z sandbox AppContainer