CVE-2023-29354

CVSS 3.1 Score 4.7 of 10 (medium)

Details

Published May 5, 2023
Updated: Jan 1, 2025

Summary

CVE-2023-29354 is a recently disclosed security vulnerability affecting Microsoft Edge, the Chromium-based web browser. This issue permits bypassing security features, potentially allowing unauthorized access or execution of malicious code. Attackers can leverage this vulnerability to escape sandbox constraints, compromising the browser and potentially the underlying system. Users are encouraged to update their Microsoft Edge browsers to the latest version to mitigate this risk. The full extent of this vulnerability and its potential impact on users is still under investigation.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Microsoft Edge Chromium

Affected Vendors

  • Microsoft