---
title: "“CVE-2024-21388”- Microsoft Edge’s Marketing API Exploited for Covert Extension Installation"
url: https://daily.dev/posts/cve-2024-21388---microsoft-edge-s-marketing-api-exploited-for-covert-extension-installation-dp8ycejyu
source_url: https://medium.com/@guardiosecurity/cve-2024-21388-microsoft-edges-marketing-api-exploited-for-covert-extension-installation-879fe5ad35ca?source=rss-6a038e71ff0f------2
type: article
source: "Guardio"
published: 2024-03-27T14:10:07.340Z
updated: 2024-05-09T08:29:02.242Z
tags: ["microsoft-edge"]
reading_time: 9
upvotes: 0
comments: 0
language: en
---

> ## Documentation Index
> Fetch the complete documentation index at: https://daily.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# “CVE-2024-21388”- Microsoft Edge’s Marketing API Exploited for Covert Extension Installation

**[Guardio](https://daily.dev/sources/guardio)** · 9 min read · 0 upvotes · 0 comments

## Summary

Guardio Labs discovered a vulnerability in Microsoft Edge's marketing API that allowed covert installation of browser extensions with broad permissions. The issue was promptly disclosed to Microsoft and resolved in February 2024. The vulnerability was due to a private API accessible from select Microsoft websites that allowed the installation of extensions without user consent. The exploitation of this vulnerability could lead to the installation of malicious extensions and potential monetary gain for attackers.

## Full article

daily.dev links to this article rather than hosting it. Read it at the original source: <https://medium.com/@guardiosecurity/cve-2024-21388-microsoft-edges-marketing-api-exploited-for-covert-extension-installation-879fe5ad35ca?source=rss-6a038e71ff0f------2>

## Similar posts on daily.dev

- [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 0 upvotes · 0 comments
- [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments
- [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments

---

Tags: [#microsoft-edge](https://daily.dev/tags/microsoft-edge)

[View this post on daily.dev](https://daily.dev/posts/cve-2024-21388---microsoft-edge-s-marketing-api-exploited-for-covert-extension-installation-dp8ycejyu)