What is CVE-2022-26895?

CVE-2022-26895 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Which CVE IDs does CVE-2022-26895 cover?

CVE-2022-26895 covers the following CVE IDs: CVE-2022-26895. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2022-26895?

CVE-2022-26895 has a CVSS v3 base score of 8.3, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2022-26895?

CVE-2022-26895 affects 1 product, including: Microsoft Edge (Chromium-based).

CVE-2022-26895HighCVSS 8.3

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

April 1, 2022

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2022-26895 →

📋 Description

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability? Successful exploitation of this vulnerability requires an attacker to take additional actions prior to exploitation to prepare the target environment.

What is the version information for this release? Microsoft Edge Version Date Released Based on Chromium Version 100.0.1185.29 4/1/2022 100.0.4896.60

🎯 Affected products1

Microsoft Edge (Chromium-based)

✅ Remediation

KBRelease Notes (Security Update) — fixed build 100.0.1185.29

🔗 References (2)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26895
referencehttps://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security