CVE-2026-70331 Microsoft Edge for iOS Spoofing Vulnerability
MediumCVSS 5.4
EPSS 0.41%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Edge (Chromium-based) | >= 1.0.0.0, < 150.0.4078.50 | 150.0.4078.50 |
| Microsoft Edge for iOS | >= 1.0.0.0, < 150.0.4078.50 | 150.0.4078.50 |
| Microsoft edge | < 150.0.4078.50 | 150.0.4078.50 |
| Microsoft edge chromium | < 150.0.4078.50 | 150.0.4078.50 |
References
- Microsoft Edge for iOS Spoofing Vulnerability patch vendor-advisory
- Release Notes vendor-advisory