CVE-2024-38093
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
A spoofing vulnerability in Microsoft Edge (Chromium-based) allows an attacker to falsify content or user interface elements. This flaw can be exploited to display a fake website, impersonating a trusted source.
Risk Assessment
The risk involves potential phishing or social engineering attacks where users might be tricked into entering sensitive data on a fraudulent page. This could lead to theft of login credentials, financial information, or other confidential data.
Recommendation
It is recommended to immediately update Microsoft Edge to the latest version that includes a fix for this vulnerability. Users should also be advised about the risks of clicking on suspicious links.
Original NVD description (English source)
Microsoft Edge (Chromium-based) Spoofing Vulnerability

