CVE-2021-24100: Microsoft Edge for Android Information Disclosure Vulnerability

Overview

Severity
Medium (CVSS 5)
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C
Category
Information Disclosure
Exploit Status
Not Exploited
Exploitation Likelihood
Less Likely
Patch Tuesday
2021-Feb
Released
2021-02-09
EPSS Score
9.54% (percentile: 92.8%)

FAQ

What type of information could be disclosed by this vulnerability? This vulnerability discloses personally identifiable information and payment information of a user.

Affected Products (1)

Browser

  • Microsoft Edge for Android

Acknowledgments

<a href="https://www.linkedin.com/in/kirtikumar-anandrao-ramchandani-ba949b153">Kirtikumar Anandrao Ramchandani</a>

Revision History

  • 2021-02-09: Information published.