Lucene search

K
mscveMicrosoftMS:CVE-2024-21336
HistoryJan 26, 2024 - 8:00 a.m.

Microsoft Edge (Chromium-based) Spoofing Vulnerability

2024-01-2608:00:00
Microsoft
msrc.microsoft.com
9
chromium-based
spoofing
vulnerability
microsoft edge

CVSS3

2.5

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

AI Score

7.1

Confidence

Low

EPSS

0.001

Percentile

23.1%

Affected configurations

Vulners
Node
microsoftedge_chromiumRange<121.0.2277.83
VendorProductVersionCPE
microsoftedge_chromium*cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*

CVSS3

2.5

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N

AI Score

7.1

Confidence

Low

EPSS

0.001

Percentile

23.1%