This vulnerability (CWE-451) in Microsoft Edge (Chromium-based) enables an attacker to spoof critical UI information, potentially deceiving users. The issue affects version 1.0.0.0 of the product. The CVSS 3.1 base score is 4.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, and user interaction needed. Microsoft has released an official fix for this vulnerability as documented in their security update guide.

An attacker exploiting this vulnerability can misrepresent critical UI information in the browser, leading to spoofing attacks. This could cause users to be deceived by falsified interface elements, potentially resulting in unsafe actions or disclosure of sensitive information. There is no direct impact on confidentiality or availability, and no known exploits are reported in the wild.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft as detailed in the vendor advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-40416 to remediate this vulnerability.