CVE-2021-24113
published 2021-02-25CVE-2021-24113: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
PriorityP426medium5.4CVSS 3.1
AVNACLPRNUIRSUCLILAN
EPSS
1.33%
68.2th percentile
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | microsoft_edge | >= 1.0.0 < publication | publication |
| msrc | microsoft_edge | — | — |
CVSS provenance
nvdv3.15.4MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
nvdv2.05.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:N
vendor_msrc5.4MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-fj23-7fxr-28v3: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
ghsa_unreviewed·2022-05-24
CVE-2021-24113 [MEDIUM] GHSA-fj23-7fxr-28v3: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
vendor_msrc·2021-02-09·CVSS 5.4
CVE-2021-24113 [MEDIUM] Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
FAQ: What is the version information for this release?
Microsoft Edge Version
Date Released
Based on Chromium Version
88.0.705.62
2/4/2021
88.0.4324.146
FAQ: What kind of security feature could be bypassed by successfully exploiting this vulnerability?
This vulnerability allows javascript to be executed in URL when copying then pasting it in the Edge browser.
Microsoft Edge (Chromium-based): Microsoft Edge (Chromium-based)
Microsoft: Microsoft
Impact: Security Feature Bypass
Exploit Status: Publicly Disclosed:No;Exploited:No;DOS:N/A
Remediation: Release Notes
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2021-02-25
Published