Rewterz Threat Advisory – Multiple Microsoft Edge Vulnerabilities

Severity

Medium

Analysis Summary

CVE-2023-36888 CVSS:6.3

Microsoft Edge for Android (Chromium-based) is vulnerable to tampering. By persuading a victim to open a specially crafted app, an attacker could exploit this vulnerability to launch further attacks on the system.

CVE-2023-36883 CVSS:4.3

Microsoft Edge for iOS could allow a remote attacker to conduct a spoofing attack. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to modify the content of the vulnerable link to redirect the victim to a malicious site.

Impact

• Gain Access

Indicators Of Compromise

CVE

• CVE-2023-36888
• CVE-2023-36883

Affected Vendors

Microsoft

Affected Products

• Microsoft Edge for Android
• Microsoft Edge for iOS

Remediation

Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.

CVE-2023-36888

CVE-2023-36883