CVE-2022-29147
published 2023-06-29CVE-2022-29147: Microsoft Edge (Chromium-based) Spoofing Vulnerability
PriorityP410low3.1CVSS 3.1
AVNACHPRNUIRSUCNILAN
EPSS
0.61%
45.5th percentile
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | edge_chromium | < 101.0.1210.32 | 101.0.1210.32 |
| microsoft | microsoft_edge | >= 1.0.0 < 101.0.1210.32 | 101.0.1210.32 |
| msrc | microsoft_edge | — | — |
CVSS provenance
nvdv3.13.1LOWCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
vendor_msrc3.1LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Microsoft
Microsoft Edge (Chromium-based) Spoofing Vulnerability
vendor_msrc·2022-04-12·CVSS 3.1
CVE-2022-29147 [LOW] Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
FAQ: What is the version information for this release?
Microsoft Edge Version
Date Released
Based on Chromium Version
101.0.1210.32
4/28/2022
101.0.4951.41
FAQ: According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
Successful exploitation of this vulnerability requires an attacker to first prepare the target so that it uses Edge in Internet Explorer Mode.
FAQ: What is Microsoft Edge (Chromium-based) in IE Mode?
Microsoft Edge (Chromium-based) in IE Mode is a feature that emulates Internet Explorer from within Microsoft Edge (Chromium-based). For more information please see About IE Mode.
FAQ: How do I get the update that addresses this Microsoft Edge (Chromium-based) in
GHSA
GHSA-78xp-962q-w8mc: Microsoft Edge (Chromium-based) Spoofing Vulnerability
ghsa_unreviewed·2023-06-29
CVE-2022-29147 [LOW] GHSA-78xp-962q-w8mc: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-06-29
Published