Описание
Microsoft Edge (Chromium-based) Spoofing Vulnerability
FAQ
What is the version information for this release?
| Microsoft Edge Version | Date Released | Based on Chromium Version |
|---|---|---|
| 112.0.1722.48 | 4/15/2023 | 112.0.5615.121 |
| 109.01518.100 | 4/24/2023 | 109.0.5414.141 |
According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
The user would have to click on a specially crafted URL to be compromised by the attacker.
What kind of security feature could be bypassed by successfully exploiting this vulnerability?
An attacker who successfully exploited this could bypass the Edge security warning message feature.
Возможность эксплуатации
Publicly Disclosed
Exploited
Latest Software Release
Older Software Release
DOS
EPSS
4.3 Medium
CVSS3
Связанные уязвимости
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Уязвимость браузера Microsoft Edge, связанная с ошибками представления информации пользовательским интерфейсом, позволяющая нарушителю выполнить спуфинговую атаку
EPSS
4.3 Medium
CVSS3