cve-2026-45650

CVE-2026-45650 is an Important-severity spoofing vulnerability in Microsoft Bing Search for Android, disclosed on June 9, 2026, and fixed in build 33.3. The flaw allows a crafted URL to cause user-interface misrepresentation, potentially exposing limited sensitive information after user interaction. As a consumer-facing search app, Bing on Android acts as a gateway to web content, and this vulnerability could be exploited to mislead users, steering attention, belief, and clicks rather than enabling system takeover. Discussions on WindowsForum cover the disclosure details, the nature of the spoofing attack, and the importance of updating to the patched version to mitigate risks.