CVE-2024-26246LowCVSS 3.9

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Published
March 14, 2024
Last Modified
—

🔗 CVE IDs covered (1)

CVE-2024-26246 →

📋 Description

What kind of security feature could be bypassed by successfully exploiting this vulnerability? An attacker who successfully exploited this could bypass the Edge AutoFill Protection feature

According to the CVSS metric, the attack vector is physical (AV:P), user interaction is required (UI:R), and privileges required is high (PR:H). What does that mean for this vulnerability? An authorized attacker with physical access to a victim's unsecured Android phone must use the autofill feature on Edge Android to access victim's saved credentials.

Microsoft Edge Channel Microsoft Edge Version Date Released Based on Chromium Version Stable 122.0.2365.92 3/14/2024 122.0.6261.128/.129 Extended Stable 122.0.2365.92 3/14/2024 122.0.6261.128/.129

🎯 Affected products1

  • Microsoft Edge for Android

✅ Remediation

KBRelease Notes (Security Update) — fixed build 122.0.2365.92

🔗 References (2)