← All CVEs

CVE-2026-45650

MEDIUM 4.3

Published 2026-06-09 · Last modified 2026-07-01

User interface (ui) misrepresentation of critical information in Microsoft Bing allows an unauthorized attacker to perform spoofing over a network.

NO EXPLOITATION SIGNALS

No known exploitation, public exploit, or elevated probability at this time. Track for changes.

Exploitation likelihood

0.6%chance of exploitation in 30 days · 45th percentile

○ In CISA KEV ○ Public exploit / PoC

Impact if exploited

4.3CVSS 3.1 · MEDIUM

  • ConfidentialityLow
  • IntegrityNone
  • AvailabilityNone

What an attacker needs

  • Access: Reachable over the network — no local access needed
  • Privileges: No account or privileges required
  • User interaction: A user must take an action (click / open a file)
  • Complexity: No special conditions — reliably repeatable

✓ lowers the bar for an attacker · ⚠ raises it

Affected

Vendors Microsoft

Products Microsoft Bing Search For Android

Weakness (CWE)

  • CWE-451

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:U/RL:O/RC:C

References

Sources: NVD · CVE.org · EPSS