{
  "cveId": "CVE-2024-39379",
  "url": "https://patchblox.com/security/cve/CVE-2024-39379",
  "summary": "CVE-2024-39379 is fixed in 4 products on 1 platform, first by Microsoft Edge Dev 128.0.2661.0, released June 19, 2024. It is not reported as exploited. Patch Radar priority: High.",
  "title": "Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability",
  "description": "Acrobat for Edge versions 126.0.2592.81 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious file.",
  "published": "2024-07-25T12:00:00Z",
  "severity": "Moderate",
  "cvss": 7,
  "cwe": "CWE-125: Out-of-bounds Read (CWE-125)",
  "epss": 0.003,
  "epssPercentile": 0.2293,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "exploitabilityAssessment": "Exploitation Less Likely",
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-39379",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "Microsoft Edge",
      "fixedVersion": "127.0.2651.74",
      "fix": "Microsoft Edge 127.0.2651.74",
      "url": "https://patchblox.com/security/fix/windows-app/microsoft.edge-127.0.2651.74",
      "released": "2024-07-25T00:00:00Z"
    },
    {
      "platform": "windows-app",
      "product": "Microsoft Edge Beta",
      "fixedVersion": "127.0.2651.74",
      "fix": "Microsoft Edge Beta 127.0.2651.74",
      "url": "https://patchblox.com/security/fix/windows-app/microsoft.edge.beta-127.0.2651.74",
      "released": "2024-07-25T00:00:00Z"
    },
    {
      "platform": "windows-app",
      "product": "Microsoft Edge Dev",
      "fixedVersion": "128.0.2661.0",
      "fix": "Microsoft Edge Dev 128.0.2661.0",
      "url": "https://patchblox.com/security/fix/windows-app/microsoft.edge.dev-128.0.2661.0",
      "released": "2024-06-19T00:00:00Z"
    },
    {
      "platform": "windows-app",
      "product": "Microsoft Edge WebView2 Runtime",
      "fixedVersion": "127.0.2651.74",
      "fix": "Microsoft Edge WebView2 Runtime 127.0.2651.74",
      "url": "https://patchblox.com/security/fix/windows-app/microsoft.edgewebview2runtime-127.0.2651.74",
      "released": "2024-09-05T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T07:25:28Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}