Lucene search

K
mscveMicrosoftMS:CVE-2024-21388
HistoryJan 30, 2024 - 8:00 a.m.

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

2024-01-3008:00:00
Microsoft
msrc.microsoft.com
24
chromium-based
elevation of privilege

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

AI Score

7.3

Confidence

Low

EPSS

0.001

Percentile

27.3%

Affected configurations

Vulners
Node
microsoftedge_chromiumRange<121.0.2277.98
VendorProductVersionCPE
microsoftedge_chromium*cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

AI Score

7.3

Confidence

Low

EPSS

0.001

Percentile

27.3%