What is CVE-2024-29057?

CVE-2024-29057 is a security advisory published by Microsoft Security Response Center (MSRC) with Low severity. Microsoft Edge (Chromium-based) Spoofing Vulnerability

Which CVE IDs does CVE-2024-29057 cover?

CVE-2024-29057 covers the following CVE IDs: CVE-2024-29057. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2024-29057?

CVE-2024-29057 has a CVSS v3 base score of 4.3, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2024-29057?

CVE-2024-29057 affects 1 product, including: Microsoft Edge (Chromium-based).

CVE-2024-29057LowCVSS 4.3

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

March 22, 2024

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2024-29057 →

📋 Description

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do? The user would have to click on a specially crafted URL to be compromised by the attacker.

According to the CVSS metric, successful exploitation of this vulnerability could lead to some loss of integrity (I:L)? What does that mean for this vulnerability? An attacker who successfully exploited this vulnerability could cover and spoof elements of the UI. The modified information is only visual.

Microsoft Edge Channel Microsoft Edge Version Date Released Based on Chromium Version Stable 123.0.2420.53 3/22/2024 123.0.6312.58/.59

🎯 Affected products1

Microsoft Edge (Chromium-based)

✅ Remediation

KBRelease Notes (Security Update) — fixed build 123.0.2420.53

🔗 CVE IDs covered (1)

📋 Description

🎯 Affected products1

✅ Remediation

🔗 References (2)