CVE-2026-42891 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

...

CVE-2026-42891

CVE-2026-42891 affects Microsoft Edge (Chromium-based) for Android . The issue is a UI misrepresentation that can enable an attacker to perform a spoofing action over a network. Documented impact includes spoofing user interface with potential exposure of sensitive information, aligned with the C...

CVE-2026-35429 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

...

CVE-2026-41102 Microsoft PowerPoint for Android Spoofing Vulnerability

...

CVE-2026-41102 Microsoft PowerPoint for Android Spoofing Vulnerability

...

CVE-2026-41102

CVE-2026-41102 affects Microsoft Office PowerPoint with an improper access control, enabling a locally authenticated attacker to spoof content. Descriptions across sources indicate PowerPoint is the affected component, with the vulnerability enabling spoofing at local scope (attack vector: local;...

CVE-2026-41100

CVE-2026-41100 describes an improper access control vulnerability in Microsoft 365 Copilot (Android) that allows an authorized attacker to perform local spoofing. The NVD entries consistently flag local attack vector with low attack complexity and low privileges required, resulting in a CVSS v3.1...

CVE-2026-41101

Technical details about CVE-2026-41101 are not publicly available in the provided documents. Monitor for updates from official sources; no specifics on affected products, versions, root cause, or remediation are included in the supplied material.

CVE-2026-41100 Microsoft 365 Copilot for Android Spoofing Vulnerability

...

CVE-2026-41100 Microsoft 365 Copilot for Android Spoofing Vulnerability

...

CVE-2026-41101 Microsoft Word for Android Spoofing Vulnerability

...

CVE-2026-41101 Microsoft Word for Android Spoofing Vulnerability

...

CVE-2026-44279

An improper export of android application components vulnerability in Fortinet FortiTokenAndroid 6.2 all versions, FortiTokenAndroid 6.1 all versions, FortiTokenAndroid 5.2 all versions may allow attacker to disclose information via an exported Content Provider URI...

CVE-2026-44279

CVE-2026-44279 concerns an improper export of Android app components in Fortinet FortiTokenAndroid across versions 6.2, 6.1, and 5.2. The issue enables improper access control via an unspecified attack vector, with a CVSS v3.1 base score of 5.5 (Medium) and a LOCAL attack vector requiring LOW pri...

Microsoft PowerPoint for Android Spoofing Vulnerability

Improper access control in Microsoft Office PowerPoint allows an authorized attacker to perform spoofing locally...

Microsoft 365 Copilot for Android Spoofing Vulnerability

Improper access control in M365 Copilot allows an authorized attacker to perform spoofing locally...

Microsoft Word for Android Spoofing Vulnerability

Improper access control in Microsoft Office Word allows an authorized attacker to perform spoofing locally...

New TrickMo Variant Uses TON C2 and SOCKS5 to Create Android Network Pivots

Cybersecurity researchers have flagged a new version of the TrickMo Android banking trojan that uses The Open Network TON for command-and-control C2. The new variant, observed by ThreatFabric between January and February 2026, has been observed actively targeting banking and cryptocurrency wallet...

iOS 26.5 Brings Default End-to-End Encrypted RCS Messaging Between iPhone and Android

Apple on Monday officially released iOS 26.5 with support for end-to-end encryption E2EE to Rich Communication Services RCS in beta as part of a "cross-industry effort" to replace traditional SMS with a more secure alternative. To that end, E2EE RCS messaging is rolling out to iPhone users runnin...

Microsoft Office 访问控制错误漏洞

Microsoft Office is a suite of office software products developed by Microsoft Corporation in the United States. Common components of this product include Word, Excel, Access, PowerPoint, and FrontPage. There is an access control error vulnerability in Microsoft Office. Attackers utilize this...