CVE-2024-38083

MEDIUM

Published Jun 13, 2024 Modified Nov 21, 2024 CWE-449

Description

Microsoft Edge (Chromium-based) Spoofing Vulnerability

CVSS v3.1 Score

4.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Weakness Type (CWE)

CWE-449 CWE-449

Affected Products

Vendor	Product	Versions
microsoft	edge_chromium	< 126.0.2592.56

References

Advisories & Patches

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38083 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38083

Frequently Asked Questions

What is CVE-2024-38083? +

Microsoft Edge (Chromium-based) Spoofing Vulnerability It has a CVSS v3.1 base score of 4.3 (MEDIUM).

How severe is CVE-2024-38083? +

CVE-2024-38083 has a CVSS v3.1 score of 4.3 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.

What products are affected by CVE-2024-38083? +

CVE-2024-38083 affects products from microsoft, specifically: edge_chromium. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2024-38083? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2025-26643 5.4

The UI performs the wrong action in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-56139 5.3

LinkedIn Mobile Application for Android version 4.1.1087.2 fails to update link preview metadata (image, title, description) when a user replaces …

CVE-2024-24698 4.9

Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access.

CVE-2025-49736 4.3

The ui performs the wrong action in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a …

CVE-2025-13637 4.3

Inappropriate implementation in Downloads in Google Chrome prior to 143.0.7499.41 allowed a remote attacker who convinced a user to engage …

CVE-2024-43577 4.3

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Quick Facts

CVSS Score: 4.3
Severity: MEDIUM
Published: Jun 13, 2024

Scan for this vulnerability

Check if your website or infrastructure is affected by CVE-2024-38083.

Website Scan Port Scan

Browse CVEs

Critical High CISA KEV ! Most likely exploited →