CVE-2023-29350
vulnerability analysis and mitigation

Overview

Microsoft Edge (Chromium-based) experienced an Elevation of Privilege Vulnerability identified as CVE-2023-29350. The vulnerability was discovered and patched in May 2023, affecting Microsoft Edge versions prior to 113.0.1774.35. The issue impacted the Chromium-based Microsoft Edge browser across all supported platforms (Microsoft Edge Notes, Gentoo Advisory).

Technical details

The vulnerability has been assessed with a CVSS v3.1 Base Score of 7.5 (HIGH), with the following vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H. This scoring indicates that the vulnerability is network-accessible, requires high attack complexity, needs no privileges, requires user interaction, and could potentially impact confidentiality, integrity, and availability at high levels (NVD).

Impact

The vulnerability could potentially lead to elevation of privilege in Microsoft Edge. Given the CVSS scoring, successful exploitation could result in high impacts on system confidentiality, integrity, and availability (Microsoft Edge Notes).

Mitigation and workarounds

Microsoft released a security update to address this vulnerability in Microsoft Edge version 113.0.1774.35. Users are advised to update their browser to this version or later to mitigate the vulnerability (Microsoft Edge Notes, Gentoo Advisory).

Additional resources


SourceThis report was generated using AI

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management