CVE-2023-36735CWE-416

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Critical · published September 15, 2023

CVSS v3.1
9.6
EPSS
2%
Percentile
81.7
In the wild
Unconfirmed
What it is

🚨 A small but critical flaw in Microsoft Edge could let attackers elevate their privileges without breaking a sweat! 🔥 Imagine a hotel where any guest can sneak behind the front desk and access the management suite — that’s exactly what this vulnerability allows in Edge! Just like an unsuspecting hotel manager could lose control, your system could be compromised too! An attacker could exploit this vulnerability to gain unauthorized access to sensitive system areas, potentially allowing them to install malicious software or manipulate settings. This means they could gain control over user accounts, steal confidential data, or even disrupt services — absolutely devastating!

Put simply

Imagine a hotel where any guest can sneak behind the front desk and access the management suite — that’s exactly what this vulnerability allows in Edge! Just like an unsuspecting hotel manager could lose control, your system could be compromised too! This elevation of privilege vulnerability in Microsoft Edge (Chromium-based) allows an attacker to run arbitrary code with elevated permissions, essentially bypassing normal security restrictions. This could lead to unauthorized actions that the user would normally not be able to perform.

What to do

An attacker could exploit this vulnerability to gain unauthorized access to sensitive system areas, potentially allowing them to install malicious software or manipulate settings. This means they could gain control over user accounts, steal confidential data, or even disrupt services — absolutely devastating! Immediate action is required! Ensure you're running the latest version of Microsoft Edge by updating to the latest release. Regularly check for updates and consider enabling automatic updates to protect your system. 🔒 You've got this! By staying updated, you’re on the frontline of combating vulnerabilities! 🛡️

The record
Technical detail
CVSS v3.1
9.6 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H/E:U/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.02117 · 81.7th percentile
Weakness
CWE-416 · Use After Free
Published
2023-09-15T21:43Z
EPSS history
Timeline
  • 15 SEP 21:43Z
    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
    cvelistv5