Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2024-38221

Опубликовано: 19 сент. 2024
Источник: msrc
CVSS3: 4.3
EPSS Низкий

Описание

Microsoft Edge (Chromium-based) Spoofing Vulnerability

FAQ

According to the CVSS metric, user interaction is required (UI:R). What does that mean for this vulnerability?

Successful exploitation requires the victim to perform multiple steps to trigger the vulnerability.

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?

The user would have to click on a specially crafted URL to be compromised by the attacker.

According to the CVSS metric, successful exploitation of this vulnerability could lead to some loss of integrity (I:L)? What does that mean for this vulnerability?

The attacker is only able to modify the content of the vulnerable link to redirect the victim to a malicious site.

What is the version information for this release?

Microsoft Edge ChannelMicrosoft Edge VersionBased on Chromium VersionDate Released
StableCVE-2024-8904,129.0.6668.58/.599/19/2024

Возможность эксплуатации

Publicly Disclosed

No

Exploited

No

Latest Software Release

Exploitation Less Likely

Older Software Release

Exploitation Less Likely

DOS

N/A

EPSS

Процентиль: 60%
0.00399
Низкий

4.3 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.3
nvd
9 месяцев назад

Microsoft Edge (Chromium-based) Spoofing Vulnerability

CVSS3: 4.3
github
9 месяцев назад

Microsoft Edge (Chromium-based) Spoofing Vulnerability

CVSS3: 4.3
fstec
9 месяцев назад

Уязвимость браузера Microsoft Edge, существующая из-за непринятия мер по защите структуры веб-страницы, позволяющая нарушителю выполнить спуфинг-атаку

EPSS

Процентиль: 60%
0.00399
Низкий

4.3 Medium

CVSS3