This vulnerability (CWE-451) in Microsoft Edge (Chromium-based) enables an attacker to spoof critical UI information, potentially deceiving users. The issue is exploitable remotely without privileges and requires user interaction. The CVSS 3.1 base score is 5.4, reflecting limited confidentiality and integrity impact but no availability impact. Microsoft has published an official fix for this vulnerability, as documented in their security update guide.

An attacker can remotely cause the browser to misrepresent critical UI information, leading to spoofing attacks that may trick users into taking unintended actions or disclosing sensitive information. The impact is limited to partial confidentiality and integrity loss without affecting availability. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the security update provided by Microsoft for Microsoft Edge (Chromium-based) to remediate this vulnerability. Refer to the Microsoft advisory at https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45488 for detailed patching instructions.