Lucene search

K
mscveMicrosoftMS:CVE-2023-36027
HistoryNov 10, 2023 - 8:00 a.m.

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

2023-11-1008:00:00
Microsoft
msrc.microsoft.com
23
microsoft
elevation
privilege
vulnerability
chromium-based

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L/E:U/RL:O/RC:C

AI Score

7.3

Confidence

Low

EPSS

0.001

Percentile

27.8%

Affected configurations

Vulners
Node
microsoftedge_chromiumRange<118.0.2088.102
OR
microsoftedge_chromiumRange<119.0.2151.58
VendorProductVersionCPE
microsoftedge_chromium*cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*

CVSS3

7.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L/E:U/RL:O/RC:C

AI Score

7.3

Confidence

Low

EPSS

0.001

Percentile

27.8%