CVE-2024-49025
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Nov 14, 2024
Updated: Nov 15, 2024
CWE ID 359
Summary
CVE-2024-49025 is an information disclosure vulnerability affecting Microsoft Edge browsers based on Chromium. Potentially sensitive data could be exposed when the browser processes specially crafted web content. An attacker may leverage this vulnerability to gain insights into a user's system or online activity, without needing any user interaction or permissions beyond visiting a malicious website. Although Microsoft has not disclosed further details, affected users are advised to keep their browsers up to date to mitigate potential risks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Microsoft Edge
Affected Vendors
- Microsoft