Lucene search

K
mscveMicrosoftMS:CVE-2024-21337
HistoryJan 11, 2024 - 8:00 a.m.

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

2024-01-1108:00:00
Microsoft
msrc.microsoft.com
42
edge
chromium
privilege
vulnerability

CVSS3

5.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L

AI Score

7.3

Confidence

Low

EPSS

0.001

Percentile

23.0%

Affected configurations

Vulners
Node
microsoftedge_chromiumRange<120.0.2210.160
OR
microsoftedge_chromiumRange<120.0.2210.133
VendorProductVersionCPE
microsoftedge_chromium*cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*

CVSS3

5.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:L

AI Score

7.3

Confidence

Low

EPSS

0.001

Percentile

23.0%

Related for MS:CVE-2024-21337