ZDI-CAN-25361: ZDI-24-1658: Microsoft Edge File Extension Spoofing Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2024-49041.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-25361?
The severity of ZDI-CAN-25361 is rated by ZDI with a CVSS score, indicating a significant risk to affected systems.
How do I fix ZDI-CAN-25361?
To fix ZDI-CAN-25361, ensure that your Microsoft Edge browser is updated to the latest version released by Microsoft.
Who is affected by ZDI-CAN-25361?
Organizations and individuals using Microsoft Edge (EdgeHTML-based) are at risk from the ZDI-CAN-25361 vulnerability.
What type of attack does ZDI-CAN-25361 enable?
ZDI-CAN-25361 allows remote attackers to execute arbitrary code after convincing the user to visit a malicious page or open a malicious file.
Is user interaction required for ZDI-CAN-25361 to be exploited?
Yes, user interaction is required for ZDI-CAN-25361 as the target must visit a malicious page or open a malicious file for the vulnerability to be exploited.