CVE-2023-24892

HIGH8.2Auth bypass

JSON export Create alert

Description

Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability

CVSS breakdown

CVSS 3.1

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Changed

Confidentiality

High

Integrity

Low

Availability

None

E

Unchanged

RL

O

RC

Changed

Affected products

Microsoft / Microsoft Edge (Chromium-based)1.0.0 – 111.0.1661.41

References

VENDOR_ADVISORYhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24892

Updated 41m ago · 2 sources