5.4
Medium
CVE-2026-70331 Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to…
Description
Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Edge (Chromium-based) 1.0 | 1.0.0.0 → < 150.0.4078.50 | 150.0.4078.50 |
| Microsoft Edge for iOS 1.0 | 1.0.0.0 → < 150.0.4078.50 | 150.0.4078.50 |
References
- Microsoft Edge for iOS Spoofing Vulnerability msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Edge (Chromium-based)
The 301 CVEs of Microsoft Edge (Chromium-based) →
CVE-2026-69446
Incorrect authorization in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally
4.4
Medium
CVE-2026-88078
Improper verification of cryptographic signature in Microsoft Edge (Chromium-based) allows an unauthorized attacker to…
4.3
Medium
CVE-2026-88077
Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate…
8.8
High
CVE-2026-96196
Incomplete list of disallowed inputs in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a…
8.8
High