CVE-2023-36022

CVSS 3.1 Score 6.6 of 10 (medium)

Details

Published Nov 3, 2023
Updated: Feb 3, 2024

Summary

CVE-2023-36022 denotes a remote code execution vulnerability affecting Microsoft Edge, the Chromium-based web browser. Malicious actors can exploit this issue to gain unauthorized access to affected systems, potentially installing malware or taking control of the browser. The vulnerability stems from a flaw in the way Microsoft Edge handles specially crafted web content, allowing attackers to inject malicious code into the browser's memory. Users are advised to keep their browsers up-to-date with the latest security patches to mitigate the risk of exploitation.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Edge Chromium

Affected Vendors

  • Microsoft