Lucene search

China National Vulnerability DatabaseCNVD-2024-17976

HistoryFeb 23, 2024 - 12:00 a.m.

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CNVD-2024-17976)

2024-02-2300:00:00

China National Vulnerability Database

www.cnvd.org.cn

microsoft edge

remote code execution

chromium-based

web browser

microsoft

vulnerability

exploit

arbitrary code

windows 10

attacker

8.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

8.4 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.003 Low

EPSS

Percentile

71.0%

JSON

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A remote code execution vulnerability exists in Microsoft Edge (Chromium-based), which can be exploited by an attacker to execute arbitrary code on a system.