Lucene search

K
mscveMicrosoftMS:CVE-2024-21385
HistoryJan 25, 2024 - 8:00 a.m.

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

2024-01-2508:00:00
Microsoft
msrc.microsoft.com
15
microsoft
edge
privilege
vulnerability
elevation

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

AI Score

7

Confidence

Low

EPSS

0.001

Percentile

51.0%

Affected configurations

Vulners
Node
microsoftedge_chromiumRange<121.0.2277.83
VendorProductVersionCPE
microsoftedge_chromium*cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*

CVSS3

8.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

AI Score

7

Confidence

Low

EPSS

0.001

Percentile

51.0%

Related for MS:CVE-2024-21385