Описание
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Improper input validation in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass a security feature locally.
FAQ
According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability?
To successfully exploit this vulnerability, an attacker would need existing ability to execute Javascript in the impacted process.
According to the CVSS metric, a successful exploitation could lead to a scope change (S:C). What does this mean for this vulnerability?
This vulnerability could lead to a browser sandbox escape.
What is the version information for this release?
| Microsoft Edge Version | Date Released | Based on Chromium Version |
|---|---|---|
| 138.0.3351.55 | 6/26/2025 | 138.0.7204.49/.50 |
Возможность эксплуатации
Publicly Disclosed
Exploited
DOS
EPSS
5.6 Medium
CVSS3
Связанные уязвимости
Improper input validation in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass a security feature locally.
Improper input validation in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass a security feature locally.
Уязвимость браузера Microsoft Edge, связанная с недостаточной проверкой входных данных, позволяющая нарушителю повысить свои привилегии
EPSS
5.6 Medium
CVSS3