CVE-2024-26167
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Summary
CVE-2024-26167 is a newly disclosed vulnerability affecting Microsoft Edge for Android. This issue enables attackers to perform spoofing attacks, tricking users into believing they are interacting with legitimate websites. The vulnerability lies in the way Microsoft Edge for Android handles specific web content, allowing an adversary to manipulate the browser's address bar and display fraudulent URLs. Successful exploitation could lead to phishing and other social engineering attacks, potentially resulting in confidential data exposure or financial losses. Users are advised to apply patches or updates as soon as they become available to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions