Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2023-36880

Опубликовано: 14 дек. 2023
Источник: msrc
CVSS3: 4.8
EPSS Низкий

Описание

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

FAQ

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?

Successful exploitation of this vulnerability requires an attacker to gather information specific to the environment and take additional actions prior to exploitation to prepare the target environment.

According to the CVSS metric, successful exploitation of this vulnerability could lead to some loss of confidentiality (C:L)? What does that mean for this vulnerability?

Exploitation of this vulnerability only discloses limited information, no sensitive information can be obtained.

According to the CVSS metric, successful exploitation of this vulnerability could lead to some loss of integrity (I:L). What does that mean for this vulnerability?

The attacker who successfully exploited the vulnerability could have limited ability to perform code execution.

What is the version information for this release?

Microsoft Edge VersionDate ReleasedBased on Chromium Version
120.0.2210.6112/7/2023120.0.6099.62/.63

Возможность эксплуатации

Publicly Disclosed

No

Exploited

No

Latest Software Release

Exploitation Less Likely

Older Software Release

Exploitation Less Likely

DOS

N/A

EPSS

Процентиль: 77%
0.0101
Низкий

4.8 Medium

CVSS3

Связанные уязвимости

CVSS3: 4.8
nvd
около 2 лет назад

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

CVSS3: 4.8
github
около 2 лет назад

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

CVSS3: 4.8
fstec
больше 2 лет назад

Уязвимость браузера Microsoft Edge, связанная с недостаточной защитой служебных данных, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

EPSS

Процентиль: 77%
0.0101
Низкий

4.8 Medium

CVSS3