CVE-2026-0385General(microsoft / edge_chromium)

LOWCVSS 5.0 · MEDIUM

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

Prioritize remediation for microsoft edge_chromium systems immediately
Assume compromise if assets are exposed
Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

microsoft CVEs Back to dashboard

3.5/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-0385

Weakness type (CWE)

CWE-451CWE-290

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

edge_chromium

Threat summary

Active exploitation appears in 1 classified signals
4 mentions across 3 observed days
Momentum state: stable

What's happening

Active exploitation reported across 1 signal
Technical details provided in 1 signal
General: 2 classified signals
Disclosure: 1 classified signal
Peaked 2d ago at 2 mentions (2026-03-13); latest day: 1
4 total mentions across 3 days

Affected systems

Vendors

microsoft

Products

edge_chromium

Deep dive

Activity timeline4 mentions / 3d

Signal classification3 categories

General

250.0%

Disclosure

125.0%

Active Exploitation

125.0%

Referenced assets4 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-13	2	Disclosure1General1
2026-03-14	1	Active Exploitation1
2026-03-31	1	General1

Full discourse4 posts

Aakash Rahsi@rahsi_aaka191d
General
CVE-2026-0385 | Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability https://www.aakashrahsi.online/post/cve-2026-0385 https://t.co/s7WpdEfmiE
Post summary
The post references CVE‑2026‑0385 as a spoofing vulnerability in Microsoft Edge (Chromium) for Android, linking to external content but offering no additional technical or exploit details.
0000045
1 followersView on X
0day Signal@0dayPublishing208d
Active Exploitation
⚡ CVE-2026-0385: Microsoft Edg... Android Edge spoofing with network vector + no auth required = phishing campaigns just got a mobile upgrade path. #MobilePhishing #EdgeVuln. https://zerodaysignal.com/vulnerability/CVE-2026-0385 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
The tweet claims that CVE‑2026‑0385 permits Android Edge spoofing without authentication, enabling phishing campaigns to target mobile users—indicating active exploitation in the wild.
0000094
147 followersView on X
CVE@CVEnew209d
General
CVE-2026-0385 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability https://www.cve.org/CVERecord?id=CVE-2026-0385
Post summary
The post merely references CVE‑2026‑0385 and links to the CVE record, providing no further technical, exploit, or mitigation information.
0000091
56.7K followersView on X
VulDB 🛡@vuldb209d
Disclosure
The severity is increased for this new vulnerability affecting Microsoft Edge (CVE-2026-0385) https://vuldb.com/?id.351039
Post summary
The post announces that Microsoft Edge CVE‑2026‑0385 has had its severity increased, linking to a VULDB entry, but offers no further technical detail or evidence of exploitation.
0000069
2.1K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	microsoft	edge_chromium	-	android	-

Explore more

Back to dashboard microsoft CVEs edge_chromium vulnerabilities

What researchers are saying

CVE-2026-0385

Aakash Rahsi@rahsi_aakaGeneral

The post references CVE‑2026‑0385 as a spoofing vulnerability in Microsoft Edge (Chromium) for Android, linking to external content but offering no additional technical or exploit details.

0day Signal@0dayPublishingActive Exploitation

The tweet claims that CVE‑2026‑0385 permits Android Edge spoofing without authentication, enabling phishing campaigns to target mobile users—indicating active exploitation in the wild.

CVE@CVEnewGeneral

The post merely references CVE‑2026‑0385 and links to the CVE record, providing no further technical, exploit, or mitigation information.

VulDB 🛡@vuldbDisclosure

The post announces that Microsoft Edge CVE‑2026‑0385 has had its severity increased, linking to a VULDB entry, but offers no further technical detail or evidence of exploitation.