Skip to content
OpenAdvisories
Low MSRC-CVE-2022-29147 1 CVE

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Published Apr 12, 2022 · Updated Apr 28, 2022

Vendor: Microsoft

Summary

Impact: Spoofing. Microsoft rating: Low. Not known to be exploited — Exploitation Less Likely. Customer action: Required.

Details

What is the version information for this release?
101.0.1210.32: 101.0.1210.32, 4/28/2022: 4/28/2022, 101.0.4951.41: 101.0.4951.41

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to first prepare the target so that it uses Edge in Internet Explorer Mode.

What is Microsoft Edge (Chromium-based) in IE Mode?
Microsoft Edge (Chromium-based) in IE Mode is a feature that emulates Internet Explorer from within Microsoft Edge (Chromium-based). For more information please see About IE Mode.

How do I get the update that addresses this Microsoft Edge (Chromium-based) in Internet Explorer Mode vulnerability?
The Microsoft Edge (Chromium-based) browser will provide the update for Microsoft Edge in IE mode. No Windows update is required.

Security updates
101.0.1210.32 — https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security

Vulnerabilities 1

Revision history

  1. #1

    Information published.

References