Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2024-38218

Опубликовано: 08 авг. 2024
Источник: msrc
CVSS3: 8.4
EPSS Низкий

Описание

Microsoft Edge (HTML-based) Memory Corruption Vulnerability

FAQ

What is the version information for this release?

Microsoft Edge ChannelMicrosoft Edge VersionBased on Chromium VersionDate Released
Stable127.0.2651.98127.0.6533.99/.1008/8/2024

According to the CVSS metric, the attack vector is local (AV:L). Why does the CVE title indicate that this is a remote code execution?

The word Remote in the title refers to the location of the attacker. This type of exploit is sometimes referred to as Arbitrary Code Execution (ACE). The attack itself is carried out locally. This means an attacker or victim needs to execute code from the local machine to exploit the vulnerability.

Возможность эксплуатации

Publicly Disclosed

No

Exploited

No

Latest Software Release

Exploitation Less Likely

Older Software Release

Exploitation Less Likely

EPSS

Процентиль: 67%
0.00533
Низкий

8.4 High

CVSS3

Связанные уязвимости

CVSS3: 8.4
nvd
больше 1 года назад

Microsoft Edge (HTML-based) Memory Corruption Vulnerability

CVSS3: 8.4
github
больше 1 года назад

Microsoft Edge (HTML-based) Memory Corruption Vulnerability

CVSS3: 8.4
fstec
больше 1 года назад

Уязвимость браузера Microsoft Edge, связанная с ошибками смешения типов данных, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 67%
0.00533
Низкий

8.4 High

CVSS3