This vulnerability (CWE-451) in Microsoft Bing Search for Android (version 1.0.0) involves the user interface misrepresenting critical information, enabling an unauthorized attacker to conduct spoofing attacks over a network. The CVSS 3.1 base score is 4.3 (medium severity), with attack vector network, low attack complexity, no privileges required, user interaction required, and limited confidentiality impact. Microsoft has published an official fix for this vulnerability as detailed in their security advisory.

The vulnerability allows an attacker to spoof critical UI information, potentially misleading users. The confidentiality impact is low, with no integrity or availability impact reported. Exploitation requires user interaction but no privileges or authentication. No known exploits are reported in the wild at this time.

An official fix is available from Microsoft. Users and administrators should apply the patch provided by Microsoft for Microsoft Bing Search for Android version 1.0.0 as detailed in the vendor advisory (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-45650).