KLA63619 PE vulnerability in Microsoft Browser

2024-01-3000:00:00

Kaspersky Lab

threats.kaspersky.com

microsoft edge browser

pe vulnerability

elevation of privilege

public exploits

update installation

cve-2024-21388

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:L

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

JSON

An elevation of privilege vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to gain privileges.

Original advisories

CVE-2024-21388

Exploitation

Public exploits exist for this vulnerability.

Related products

Microsoft-Edge

CVE list

CVE-2024-21388 high

KB list

Solution

Install necessary updates from the Settings and more menu, that are listed in your About Microsoft Edge page (Microsoft Edge About page usually can be accessed from the Help and feedback option)

Microsoft Edge update settings

Impacts

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.