CVE Catalog

CVE-2024-38093

MediumCVSS 4.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.49%

39th percentile - higher than 39% of all known CVEs

Summary

A spoofing vulnerability in Microsoft Edge (Chromium-based) allows an attacker to falsify content or user interface elements. This flaw can be exploited to display a fake website, impersonating a trusted source.

Risk Assessment

The risk involves potential phishing or social engineering attacks where users might be tricked into entering sensitive data on a fraudulent page. This could lead to theft of login credentials, financial information, or other confidential data.

Recommendation

It is recommended to immediately update Microsoft Edge to the latest version that includes a fix for this vulnerability. Users should also be advised about the risks of clicking on suspicious links.

Original NVD description (English source)

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Vulnerability data from NVD (NIST) · CISA KEV · EPSS