PT-2024-5976 · Microsoft · Edge

Eternalsakura13 · Published 2024-08-22 · Updated 2024-09-19 · CVE-2024-38207

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Edge (HTML-based) versions up to 127.0.2651.105

Description The issue is related to a memory corruption vulnerability in Microsoft Edge, based on Chromium, which can be exploited by an attacker to execute arbitrary code remotely. This is due to a buffer overflow operation.

Recommendations For versions up to 127.0.2651.105, upgrade Microsoft Edge to the latest secure version immediately.

Fix

RCE

Type Confusion

Memory Corruption

Weakness Enumeration

CWE-843

CWE-787

Related Identifiers

BDU:2024-06784

CVE-2024-38207

Affected Products

Edge

References · 12

• https://bdu.fstec.ru/vul/2024-06784 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-38207 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38207 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-38207 · Vendor Advisory
• https://t.me/cvedetector/4045 · Telegram Post
• https://twitter.com/windowsforum/status/1836918358232494267 · Twitter Post
• https://twitter.com/oktsec/status/1827258107862364650 · Twitter Post
• https://twitter.com/CVEnew/status/1827122265764589747 · Twitter Post
• https://t.me/cvenotify/92026 · Telegram Post
• https://t.me/cvenotify/95368 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2024082330 · Note
• https://twitter.com/VulmonFeeds/status/1827140155704009086 · Twitter Post