CVE-2024-26167

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Mar 7, 2024
Updated: Jun 11, 2024
CWE ID 1021

Summary

CVE-2024-26167 is a newly disclosed vulnerability affecting Microsoft Edge for Android. This issue enables attackers to perform spoofing attacks, tricking users into believing they are interacting with legitimate websites. The vulnerability lies in the way Microsoft Edge for Android handles specific web content, allowing an adversary to manipulate the browser's address bar and display fraudulent URLs. Successful exploitation could lead to phishing and other social engineering attacks, potentially resulting in confidential data exposure or financial losses. Users are advised to apply patches or updates as soon as they become available to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share