Summary
Impact: Spoofing. Microsoft rating: Moderate. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
What is the version information for this release?
112.0.1722.48: 112.0.1722.48, 4/15/2023: 4/15/2023, 112.0.5615.121: 112.0.5615.121, 109.01518.100: 109.01518.100, 4/24/2023: 4/24/2023, 109.0.5414.141: 109.0.5414.141
According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
The user would have to click on a specially crafted URL to be compromised by the attacker.
What kind of security feature could be bypassed by successfully exploiting this vulnerability?
An attacker who successfully exploited this could bypass the Edge security warning message feature.
Security updates
112.0.1722.48 — https://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security
Vulnerabilities 1
-
Medium 4.3
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Revision history
-
#1
Information published.
References
-
CVE-2023-29334 Microsoft Edge (Chromium-based) Spoofing Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29334
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss