CVE-2023-21719: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Overview
- Severity
- Medium (CVSS 6.5)
- CVSS Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
- Category
- Edge - Chromium
- Exploit Status
- Not Exploited
- Exploitation Likelihood
- Less Likely
- Patch Tuesday
- 2023-Jan
- Released
- 2023-01-19
- EPSS Score
- 3.21% (percentile: 87.0%)
FAQ
What kind of security feature could be bypassed by successfully exploiting this vulnerability?
An attacker who successfully exploited this could bypass the Edge AutoFill Protection feature
According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
The user would have to click on a specially crafted URL to be compromised by the attacker.
Affected Products (1)
Browser
- Microsoft Edge (Chromium-based)
Acknowledgments
Ahmed ElMasry
Revision History
- 2023-01-19: Information published.