CVE-2021-42307
published 2023-07-01CVE-2021-42307: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
PriorityP416medium4.3CVSS 3.1
AVNACLPRNUIRSUCLINAN
EPSS
1.04%
60.5th percentile
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | edge_chromium | < 95.0.1020.30 | 95.0.1020.30 |
| microsoft | microsoft_edge | >= 1.0.0 < 95.0.1020.30 | 95.0.1020.30 |
| msrc | microsoft_edge | — | — |
CVSS provenance
nvdv3.14.3MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
vendor_msrc4.3MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Microsoft
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
vendor_msrc·2021-10-12·CVSS 4.3
CVE-2021-42307 [MEDIUM] Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
FAQ: What is the version information for this release?
Microsoft Edge Version
Date Released
Based on Chromium Version
95.0.1020.30
10/21/2021
95.0.4638.54
Microsoft Edge (Chromium-based): Microsoft Edge (Chromium-based)
Microsoft: Microsoft
Impact: Information Disclosure
Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A
Remediation: Release Notes
GHSA
GHSA-9qgv-jm4q-8gqq: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
ghsa_unreviewed·2023-07-01
CVE-2021-42307 [MEDIUM] GHSA-9qgv-jm4q-8gqq: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-07-01
Published