Microsoft Edge Security Update – 06 June 2023

The addressed vulnerabilities could allow the remote attacker to perform various attacks such as bypassing security restrictions, gaining elevated privileges, or gaining access to the vulnerable system.

Sample of the addressed vulnerabilities:

1. Microsoft Edge Privilege Escalation Vulnerability (CVE-2023-33143):

• CVSS: 7.5
• Attack Vector: Network
• Attack Complexity: High
• Privileges Required: None
• User Interaction: Required
• Consequences: Gain Privileges

2. Microsoft Edge Security Feature Bypass Vulnerability (CVE-2023-29345):

• CVSS: 6.1
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: Required
• Consequences: Bypass Security

It should be highlighted that Microsoft is aware of recent exploits existing in the wild, and working to release security patches. Also, it is worth noting that Microsoft Edge’s enhanced security mode feature helps to mitigate the flaw.