CVE-2023-36888

CWE-20 — Improper Input Validation4 documents4 sources
Severity
6.3MEDIUM
EPSS
0.2%
top 59.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Microsoft Microsoft Edge FOR AndroidMicrosoft Edge Chromium
Timeline
PublishedJul 14

Description

Microsoft Edge for Android (Chromium-based) Tampering Vulnerability

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:LExploitability: 2.8 | Impact: 3.4

Affected Packages2 packages

▶NVDmicrosoft/edge_chromium< 114.0.1823.82
▶CVEListV5microsoft/microsoft_edge_for_android1.0.0 — 114.0.1823.82

Patches

Patch: msrc.microsoft.com ↗Patch: msrc.microsoft.com ↗

🔴Vulnerability Details

2
CVEList
Microsoft Edge for Android (Chromium-based) Tampering Vulnerability↗2023-07-14
▶
GHSA
GHSA-xf99-rvc4-hfcm: Microsoft Edge for Android (Chromium-based) Tampering Vulnerability↗2023-07-14
▶

📋Vendor Advisories

1
Microsoft
Microsoft Edge for Android (Chromium-based) Tampering Vulnerability↗2023-07-11
▶