CVE-2024-29987

Published: Apr 18, 2024Modified: Jan 17, 2025

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: secure@microsoft.com (Secondary)

Description

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Affected (1)

Products: Microsoft: Edge Chromium

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Edge Chromium	Before 124.0.2478.51

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Exposure of Private Personal Information to an Unauthorized Actor

The product does not properly prevent a person's private, personal information from being accessed by actors who either (1) are not explicitly authorized to access the information or (2) do not have the implicit consent of the person about whom the information is collected.

References (2)

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29987

Source: secure@microsoft.com

Vendor Advisory

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29987

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.