Microsoft Edge (Chromium-based) Spoofing Vulnerability

According to the CVSS metric, user interaction is required (UI:R). What does that mean for this vulnerability? Successful exploitation requires the victim to perform multiple steps to trigger the vulnerability.

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do? The user would have to click on a specially crafted URL to be compromised by the attacker.

According to the CVSS metric, successful exploitation of this vulnerability could lead to some loss of integrity (I:L)? What does that mean for this vulnerability? The attacker is only able to modify the content of the vulnerable link to redirect the victim to a malicious site.

What is the version information for this release? Microsoft Edge Channel Microsoft Edge Version Based on Chromium Version Date Released Stable CVE-2024-8904, 129.0.6668.58/.59 9/19/2024