PT-2024-33325 · Microsoft · Edge

Sakil Hasan Saikat + 1 · Published 2024-11-21 · Updated 2025-01-21 · CVE-2024-49054

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Edge (Chromium-based) versions up to 131.0.2903.48

Description The Microsoft Edge browser, specifically the Chromium-based version, is affected by a spoofing issue that can be remotely exploited. Users should upgrade Microsoft Edge to the latest version as soon as possible to mitigate this issue.

Recommendations For Microsoft Edge (Chromium-based) versions up to 131.0.2903.48, upgrade to the latest version as soon as possible to resolve the issue. As a temporary workaround, consider restricting access to sensitive information until the update is applied.

Fix

Weakness Enumeration

CWE-357

Related Identifiers

BDU:2025-02248

CVE-2024-49054

Affected Products

Edge

References · 11

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-49054 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49054 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-49054 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-49054 · Security Note
• https://bdu.fstec.ru/vul/2025-02248 · Security Note
• https://t.me/cvenotify/108133 · Telegram Post
• https://twitter.com/windowsforum/status/1860018049174172062 · Twitter Post
• https://twitter.com/oktsec/status/1859999854690263480 · Twitter Post
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2024-49054 · Note
• https://twitter.com/0xSaikat/status/1864659683010601022 · Twitter Post
• https://twitter.com/CVEnew/status/1859973002588455146 · Twitter Post