3.9

CVE-2024-26246

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Edge SwPlatformandroid Version < 122.0.2365.92
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.29% 0.522
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 3.9 0.3 3.6
CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
secure@microsoft.com 3.9 0.2 3.6
CVSS:3.1/AV:P/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
CWE-1220 Insufficient Granularity of Access Control

The product implements access controls via a policy or other feature with the intention to disable or restrict accesses (reads and/or writes) to assets in a system from untrusted agents. However, implemented access controls lack required granularity, which renders the control policy too broad because it allows accesses from unauthorized agents to the security-sensitive assets.