Severity Rating: MEDIUM
Software Affected
•Microsoft Edge (Chromium-based) versions prior to 83.0.478.37
Overview
A vulnerability has been reported in Microsoft Edge (Chromium-based) that
could allow a remote attacker to gain elevated privileges on a targeted
system.
Description
This vulnerability exists in the affected software due to improper
validation of input by the Feedback extension.
Successful exploitation of this vulnerability could allow the attacker to
write files to arbitrary locations and gain elevated privileges on the
targeted system .
Note: This vulnerability only exists in Chromium-based versions of
Microsoft Edge (which use Blink engine) and not the Edge HTML engine based
versions.
Solution
Update to version 83.0.478.37 as mentioned at
- -1195
Vendor Information
Microsoft
- -1195
References
Microsoft
- -1195
CyberSecurityHelp
CVE Name
Chromium-based)
About Cert Advisory
We have created this blog to provide latest security advisory from the india cert for the security vulnerability, threats, attacks and patching required to mitigate any kind of cyber attacks.