CVE-2024-38083
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
A spoofing vulnerability in Microsoft Edge (Chromium-based) allows an attacker to impersonate a trusted website. The flaw stems from improper URL processing, which can lead to a fake address bar being displayed.
Risk Assessment
The risk involves the possibility of a phishing attack where the user may be tricked into entering sensitive data on a fraudulent page. This could lead to theft of login credentials or other confidential information.
Recommendation
It is recommended to immediately update Microsoft Edge to the latest version available from the official repository. Users should also be informed about the risks of clicking on suspicious links.
Original NVD description (English source)
Microsoft Edge (Chromium-based) Spoofing Vulnerability

