Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2022-44708

Опубликовано: 05 дек. 2022
Источник: msrc
CVSS3: 8.3
EPSS Низкий

Описание

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

FAQ

What is the version information for this release?

Microsoft Edge VersionDate ReleasedBased on Chromium Version
108.0.1462.4112/5/2022108.0.5359.94

According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?

This vulnerability could lead to a browser sandbox escape.

According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?

The user would have to click on a specially crafted URL to be compromised by the attacker.

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?

Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.

Возможность эксплуатации

Publicly Disclosed

No

Exploited

No

Latest Software Release

Exploitation Less Likely

Older Software Release

Exploitation Less Likely

DOS

N/A

EPSS

Процентиль: 56%
0.00334
Низкий

8.3 High

CVSS3

Связанные уязвимости

CVSS3: 8.3
nvd
около 3 лет назад

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVSS3: 8.3
github
около 3 лет назад

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability.

CVSS3: 8.3
fstec
около 3 лет назад

Уязвимость браузеров Microsoft Edge и Google Chrome, связанная с недостатками разграничения доступа, позволяющая нарушителю повысить свои привилегии

EPSS

Процентиль: 56%
0.00334
Низкий

8.3 High

CVSS3