Описание
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
FAQ
What kind of security feature could be bypassed by successfully exploiting this vulnerability?
An attacker who successfully exploited this could bypass the Edge AutoFill Protection feature
According to the CVSS metric, the attack vector is physical (AV:P), user interaction is required (UI:R), and privileges required is high (PR:H). What does that mean for this vulnerability?
An authorized attacker with physical access to a victim's unsecured Android phone must use the autofill feature on Edge Android to access victim's saved credentials.
| Microsoft Edge Channel | Microsoft Edge Version | Date Released | Based on Chromium Version |
|---|---|---|---|
| Stable | 122.0.2365.92 | 3/14/2024 | 122.0.6261.128/.129 |
| Extended Stable | 122.0.2365.92 | 3/14/2024 | 122.0.6261.128/.129 |
Возможность эксплуатации
Publicly Disclosed
Exploited
Latest Software Release
Older Software Release
DOS
EPSS
3.9 Low
CVSS3
Связанные уязвимости
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Уязвимость браузера Microsoft Edge для Android, связанная с недостатками контроля доступа, позволяющая нарушителю обойти существующие ограничения безопасности
EPSS
3.9 Low
CVSS3