CVE Catalog

CVE-2024-38083

MediumCVSS 4.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.49%

39th percentile - higher than 39% of all known CVEs

Summary

A spoofing vulnerability in Microsoft Edge (Chromium-based) allows an attacker to impersonate a trusted website. The flaw stems from improper URL processing, which can lead to a fake address bar being displayed.

Risk Assessment

The risk involves the possibility of a phishing attack where the user may be tricked into entering sensitive data on a fraudulent page. This could lead to theft of login credentials or other confidential information.

Recommendation

It is recommended to immediately update Microsoft Edge to the latest version available from the official repository. Users should also be informed about the risks of clicking on suspicious links.

Original NVD description (English source)

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS