Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2022-29147

Опубликовано: 28 апр. 2022
Источник: msrc
CVSS3: 3.1
EPSS Низкий

Описание

Microsoft Edge (Chromium-based) Spoofing Vulnerability

FAQ

What is the version information for this release?

Microsoft Edge VersionDate ReleasedBased on Chromium Version
101.0.1210.324/28/2022101.0.4951.41

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?

Successful exploitation of this vulnerability requires an attacker to first prepare the target so that it uses Edge in Internet Explorer Mode.

What is Microsoft Edge (Chromium-based) in IE Mode?

Microsoft Edge (Chromium-based) in IE Mode is a feature that emulates Internet Explorer from within Microsoft Edge (Chromium-based). For more information please see About IE Mode.

How do I get the update that addresses this Microsoft Edge (Chromium-based) in Internet Explorer Mode vulnerability?

The Microsoft Edge (Chromium-based) browser will provide the update for Microsoft Edge in IE mode. No Windows update is required.

Возможность эксплуатации

Publicly Disclosed

No

Exploited

No

Latest Software Release

Exploitation Less Likely

Older Software Release

Exploitation Less Likely

EPSS

Процентиль: 80%
0.0134
Низкий

3.1 Low

CVSS3

Связанные уязвимости

CVSS3: 3.1
nvd
больше 2 лет назад

Microsoft Edge (Chromium-based) Spoofing Vulnerability

CVSS3: 3.1
github
больше 2 лет назад

Microsoft Edge (Chromium-based) Spoofing Vulnerability

CVSS3: 3.1
fstec
почти 4 года назад

Уязвимость режима Internet Explorer (IE) браузера Microsoft Edge, позволяющая нарушителю проводить спуфинг-атаки

EPSS

Процентиль: 80%
0.0134
Низкий

3.1 Low

CVSS3