Lucene search

K
mscveMicrosoftMS:CVE-2023-36008
HistoryNov 16, 2023 - 8:00 a.m.

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

2023-11-1608:00:00
Microsoft
msrc.microsoft.com
23
edge browser
chromium-based
remote code execution
vulnerability

CVSS3

6.6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L

AI Score

7.4

Confidence

Low

EPSS

0.001

Percentile

33.0%

Affected configurations

Vulners
Node
microsoftedge_chromiumRange<119.0.2151.72
OR
microsoftedge_chromiumRange<119.0.2151.72
VendorProductVersionCPE
microsoftedge_chromium*cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*

CVSS3

6.6

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L

AI Score

7.4

Confidence

Low

EPSS

0.001

Percentile

33.0%