What is CVE-2022-26899?

CVE-2022-26899 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Which CVE IDs does CVE-2022-26899 cover?

CVE-2022-26899 covers the following CVE IDs: CVE-2022-26899. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2022-26899?

CVE-2022-26899 has a CVSS v3 base score of 6.3, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2022-26899?

CVE-2022-26899 affects 1 product, including: Microsoft Edge (Chromium-based).

CVE-2022-26899HighCVSS 6.3

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

March 17, 2022

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2022-26899 →

📋 Description

What is the version information for this release? Microsoft Edge Version Date Released Based on Chromium Version 99.0.1150.46 3/17/2022 99.0.4844.74

According to the CVSS metrics, successful exploitation of this vulnerability could lead to minor loss of confidentiality (C:L), integrity (I:L) and availability (A:L). What does that mean for this vulnerability? While we cannot rule out the impact to Confidentiality, Integrity, and Availability, the ability to exploit this vulnerability by itself is limited. An attacker would need to combine this with other vulnerabilities to perform an attack.

🎯 Affected products1

Microsoft Edge (Chromium-based)

✅ Remediation

KBRelease Notes (Security Update) — fixed build 99.0.1150.46

🔗 References (2)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2022-26899
referencehttps://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security