Severity
Medium
Analysis Summary
CVE-2023-36888 CVSS:6.3
Microsoft Edge for Android (Chromium-based) is vulnerable to tampering. By persuading a victim to open a specially crafted app, an attacker could exploit this vulnerability to launch further attacks on the system.
CVE-2023-36883 CVSS:4.3
Microsoft Edge for iOS could allow a remote attacker to conduct a spoofing attack. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this vulnerability to modify the content of the vulnerable link to redirect the victim to a malicious site.
Impact
- Gain Access
Indicators Of Compromise
CVE
- CVE-2023-36888
- CVE-2023-36883
Affected Vendors
Microsoft
Affected Products
- Microsoft Edge for Android
- Microsoft Edge for iOS
Remediation
Use Microsoft Automatic Update to apply the appropriate patch for your system, or the Microsoft Security Update Guide to search for available patches.