CVE Catalog

CVE-2024-38082

MediumCVSS 4.7
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.49%

39th percentile - higher than 39% of all known CVEs

Summary

A spoofing vulnerability in Microsoft Edge (Chromium-based) allows attackers to falsify content or user interface elements. This flaw can be exploited to display deceptive information, potentially leading to fraud or data theft.

Risk Assessment

The risk for the organization includes the possibility of phishing or social engineering attacks, which could result in sensitive data leakage or loss of user trust.

Recommendation

It is recommended to immediately update Microsoft Edge to the latest version provided by the vendor. Users should also be advised to exercise caution when clicking on suspicious links.

Original NVD description (English source)

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS