What is CVE-2023-28301?

CVE-2023-28301 is a security advisory published by Microsoft Security Response Center (MSRC) with Low severity. Microsoft Edge (Chromium-based) Tampering Vulnerability

Which CVE IDs does CVE-2023-28301 cover?

CVE-2023-28301 covers the following CVE IDs: CVE-2023-28301. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2023-28301?

CVE-2023-28301 has a CVSS v3 base score of 3.7, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2023-28301?

CVE-2023-28301 affects 1 product, including: Microsoft Edge for Android.

CVE-2023-28301LowCVSS 3.7

Microsoft Edge (Chromium-based) Tampering Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

April 6, 2023

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2023-28301 →

📋 Description

According to the CVSS metric, the attack complexity is high (AC:H). What does that mean for this vulnerability? Successful exploitation of this vulnerability requires an attacker to first prepare the target so that the attacker is on the same network as potential victims.

What is the version information for this release? Microsoft Edge Version Date Released Based on Chromium Version 112.0.1722.34 4/6/2023 112.0.5615.49/50

🎯 Affected products1

Microsoft Edge for Android

✅ Remediation

KBRelease Notes (Security Update) — fixed build 112.0.5615.49/50

🔗 References (1)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-28301