CVE Catalog

CVE-2024-30058

MediumCVSS 5.4
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.39%

32th percentile - higher than 32% of all known CVEs

Summary

A spoofing vulnerability in Microsoft Edge (Chromium-based) allows an attacker to manipulate the user interface, such as the address bar. This can be used to display misleading content, tricking users into believing they are on a legitimate site.

Risk Assessment

The risk involves potential phishing or social engineering attacks, where users may be deceived into disclosing sensitive information by trusting a spoofed interface.

Recommendation

Immediately update Microsoft Edge to the latest version that includes a fix for this vulnerability. Additionally, educate users about the risks of clicking on suspicious links.

Original NVD description (English source)

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS