CVE-2024-30055

MEDIUM

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Affects 1 product across 1 vendor.

CVSS 3.15.4
EPSS0.6%
Percentile49th
PatchPatched
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, requires user interaction, impact contained to the vulnerable component, no availability impact.
CWE Weakness Definitions
CWE-451: CWE-451
Related Attack Patterns (CAPEC)
CAPEC-163 Spear Phishing
via CWE-451
CAPEC-164 Mobile Phishing
via CWE-451
CAPEC-98 Phishing
via CWE-451
CAPEC-154 Resource Location Spoofing
via CWE-451
CAPEC-173 Action Spoofing
via CWE-451

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A spoofing vulnerability in Microsoft Edge (Chromium-based) could allow an attacker to trick users into visiting malicious websites by displaying misleading URLs in the address bar.

BSID: BS-2024-GLOBAL-208249-M • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2024-30055?
A spoofing vulnerability in Microsoft Edge (Chromium-based) could allow an attacker to trick users into visiting malicious websites by displaying misleading URLs in the address bar.
What is the CVSS score for CVE-2024-30055?
CVE-2024-30055 has CVSS 5.4 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N. EPSS: 0.6%.
Is CVE-2024-30055 actively exploited?
No confirmed active exploitation of CVE-2024-30055 as of 2026-05-30.
How do I remediate CVE-2024-30055?
Priority: MEDIUM. Advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-30055 PSIRT: [email protected]
What systems are affected by CVE-2024-30055?
CVE-2024-30055 affects Microsoft Edge Chromium.
Vulnerability Details
CVE IDCVE-2024-30055
BSIDBS-2024-GLOBAL-208249-M BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Published2024-05-14
Last Modified2025-01-17
ICS Relevance0%
Weakness (CWE)
CWE-451
SourceNVD
Official Description

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

The vulnerability exists due to improper validation of URLs in the address bar. An attacker could exploit this by crafting a malicious website that appears to be a legitimate one, potentially leading to phishing attacks or the installation of malicious software.

Exploitation Likelihood: MEDIUM

Affected Products
VendorProductAffected Versions
Microsoft Edge Chromium < 124.0.2478.97
Remediation
View Vendor Advisory →

Remediation Priority: MEDIUM

Vendor PSIRT: [email protected]
Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 884 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hashee107e1f95ca0cb1c099c389b8418a6381c5a65d9625cdf61575a2a68a618bcf4e995bd7e29debf9af029b7a913df2a76ff01a1620d1a2608515efa707455bab
Related CVEs affecting Microsoft
CVE-2026-48331 10.0 Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SS... CVE-2007-1644 10.0 The dynamic DNS update mechanism in the DNS Server service on Microsoft Windo... CVE-2009-2532 10.0 Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold and SP2,... CVE-2012-0772 10.0 An unspecified ActiveX control in Adobe Flash Player before 10.3.183.18 and 1... CVE-2011-1300 10.0 The Program::getActiveUniformMaxLength function in libGLESv2/Program.cpp in l...
View all Microsoft CVEs →

ICS/OT Vulnerability Intelligence for Your Environment

BreachSpider tracks 384,000+ CVEs and matches them to your ICS/OT assets by exact version, with AI analysis, NERC CIP mapping, and vendor PSIRT contacts.

Create a free account →