CVE-2023-36883: 
NixOS vulnerability analysis and mitigation

Microsoft Edge for iOS Spoofing Vulnerability (CVE-2023-36883) was discovered and disclosed in July 2023. This vulnerability affects Microsoft Edge for iOS versions prior to 114.0.1823.82. The vulnerability was initially analyzed by NIST on July 26, 2023, and has undergone several modifications in its assessment (NVD, CVE).

The vulnerability has been assigned a CVSS v3.1 Base Score of 4.3 (MEDIUM) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N. It has been classified under CWE-290 (Authentication Bypass by Spoofing) by CISA-ADP (NVD).

The vulnerability could potentially lead to spoofing attacks and authentication bypass issues in Microsoft Edge for iOS. The CVSS scoring indicates that while the vulnerability requires user interaction, it can be exploited over the network without requiring privileges, potentially leading to low-impact integrity breaches (NVD).

Microsoft has released a patch to address this vulnerability. Users are advised to update their Microsoft Edge for iOS to version 114.0.1823.82 or later to mitigate the risk (Microsoft Advisory).