CVE-2021-41351: Microsoft Edge (Chrome based) Spoofing on IE Mode

Overview

Severity
Medium (CVSS 4.3)
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C
Category
Spoofing
Exploit Status
Not Exploited
Exploitation Likelihood
Less Likely
Patch Tuesday
2021-Nov
Released
2021-11-09
EPSS Score
12.29% (percentile: 93.9%)

Detection & Weaponization (1 sources)

Maturity: Exploit

  • GitHub PoC: 1 repositories

Affected Products (17)

Browser

  • Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1809 for 32-bit Systems
  • Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1809 for x64-based Systems
  • Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1809 for ARM64-based Systems
  • Microsoft Edge (Chromium-based) in IE Mode on Windows Server 2019
  • Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1909 for 32-bit Systems
  • Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1909 for x64-based Systems
  • Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 1909 for ARM64-based Systems
  • Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 2004 for 32-bit Systems
  • Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 2004 for ARM64-based Systems
  • Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 2004 for x64-based Systems
  • Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 21H1 for 32-bit Systems
  • Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 21H1 for ARM64-based Systems
  • Microsoft Edge (Chromium-based) in IE Mode on Windows 11 version 21H2 for ARM64-based Systems
  • Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 20H2 for ARM64-based Systems
  • Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 21H1 for x64-based Systems
  • Microsoft Edge (Chromium-based) in IE Mode on Windows 11 version 21H2 for x64-based Systems
  • Microsoft Edge (Chromium-based) in IE Mode on Windows 10 Version 20H2 for 32-bit Systems

Security Updates (4)

Acknowledgments

James Lee <a href="https://twitter.com/Windowsrcer"/>@Windowsrcer</a>

Revision History

  • 2021-11-09: Information published.