CVE-2024-29981 - Vulnerability Details - OpenCVE

ReportizFlow

Microsoft Edge (Chromium-based) Spoofing Vulnerability

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Microsoft	Edge Chromium

No data.

No data.

References

Link	Providers
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29981

History

Fri, 11 Oct 2024 21:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: microsoft

Published: 2024-04-04T21:47:07.386Z

Updated: 2024-10-09T01:41:10.993Z

Reserved: 2024-03-22T23:12:11.045Z

Link: CVE-2024-29981

Vulnrichment

Updated: 2024-08-02T01:17:58.659Z

NVD

Status : Awaiting Analysis

Published: 2024-04-04T22:15:09.153

Modified: 2024-11-21T09:08:44.330

Link: CVE-2024-29981

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-29981", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "state": "PUBLISHED", "assignerShortName": "microsoft", "dateReserved": "2024-03-22T23:12:11.045Z", "datePublished": "2024-04-04T21:47:07.386Z", "dateUpdated": "2024-10-09T01:41:10.993Z"}, "containers": {"cna": {"title": "Microsoft Edge (Chromium-based) Spoofing Vulnerability", "datePublic": "2024-04-04T07:00:00+00:00", "affected": [{"vendor": "Microsoft", "product": "Microsoft Edge (Chromium-based)", "cpes": ["cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*"], "platforms": ["Unknown"], "versions": [{"version": "1.0.0", "lessThan": "123.0.2420.81", "versionType": "custom", "status": "affected"}]}, {"vendor": "Microsoft", "product": "Microsoft Edge (Chromium-based) Extended Stable", "cpes": ["cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:extended_stable:*:*:*"], "platforms": ["Unknown"], "versions": [{"version": "1.0.0", "lessThan": "122.0.2365.120", "versionType": "custom", "status": "affected"}]}], "descriptions": [{"value": "Microsoft Edge (Chromium-based) Spoofing Vulnerability", "lang": "en-US"}], "problemTypes": [{"descriptions": [{"description": "CWE-1021: Improper Restriction of Rendered UI Layers or Frames", "lang": "en-US", "type": "CWE", "cweId": "CWE-1021"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2024-10-09T01:41:10.993Z"}, "references": [{"name": "Microsoft Edge (Chromium-based) Spoofing Vulnerability", "tags": ["vendor-advisory"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29981"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en-US", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "baseSeverity": "MEDIUM", "baseScore": 4.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"}}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-29981", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-04-05T15:56:28.436336Z"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-05T17:22:26.719Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T01:17:58.659Z"}, "title": "CVE Program Container", "references": [{"name": "Microsoft Edge (Chromium-based) Spoofing Vulnerability", "tags": ["vendor-advisory", "x_transferred"], "url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29981"}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29981", "name": "Microsoft Edge (Chromium-based) Spoofing Vulnerability", "tags": ["vendor-advisory", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T01:17:58.659Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-29981", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-04-05T15:56:28.436336Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-07-05T15:20:43.121Z"}}], "cna": {"title": "Microsoft Edge (Chromium-based) Spoofing Vulnerability", "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C"}, "scenarios": [{"lang": "en-US", "value": "GENERAL"}]}], "affected": [{"cpes": ["cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*"], "vendor": "Microsoft", "product": "Microsoft Edge (Chromium-based)", "versions": [{"status": "affected", "version": "1.0.0", "lessThan": "123.0.2420.81", "versionType": "custom"}], "platforms": ["Unknown"]}, {"cpes": ["cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:extended_stable:*:*:*"], "vendor": "Microsoft", "product": "Microsoft Edge (Chromium-based) Extended Stable", "versions": [{"status": "affected", "version": "1.0.0", "lessThan": "122.0.2365.120", "versionType": "custom"}], "platforms": ["Unknown"]}], "datePublic": "2024-04-04T07:00:00+00:00", "references": [{"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29981", "name": "Microsoft Edge (Chromium-based) Spoofing Vulnerability", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en-US", "value": "Microsoft Edge (Chromium-based) Spoofing Vulnerability"}], "problemTypes": [{"descriptions": [{"lang": "en-US", "type": "CWE", "cweId": "CWE-1021", "description": "CWE-1021: Improper Restriction of Rendered UI Layers or Frames"}]}], "providerMetadata": {"orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft", "dateUpdated": "2024-10-09T01:41:10.993Z"}}}, "cveMetadata": {"cveId": "CVE-2024-29981", "state": "PUBLISHED", "dateUpdated": "2024-10-09T01:41:10.993Z", "dateReserved": "2024-03-22T23:12:11.045Z", "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "datePublished": "2024-04-04T21:47:07.386Z", "assignerShortName": "microsoft"}, "dataVersion": "5.1"}