CVE-2023-36741 – Microsoft Edge bug

Dear readers,
we wanted to inform you about the new vulnerability "CVE-2023-36741", which affects the Microsoft Edge browser.

Score: 8.3
Publish date: 25.08.2023
Affected browser version: versions below 116.0.1938.62
Affected OS: Windows, Linux, MacOS X

Description

This is a vulnerability in Microsoft Edge (Chromium-based) that could allow an attacker to elevate their privileges on the affected system. The vulnerability has been assigned a high severity rating with a CVSS score of 8.3, indicating that it poses a significant risk.

Please inform customers and call for patching. Ensure the latest stable version (116.0.1938.62), which includes the security update for this vulnerability, is used.

References

https://nvd.nist.gov/vuln/detail/CVE-2023-36741
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36741
https://www.news.de/technik/857111132/microsoft-edge-gefaehrdet-it-sicherheitswarnung-vom-bsi-und-bug-report-betroffene-systeme-und-produkte-neue-versionen-und-updates-fuer-cve-2023-36741/1/

Back to all blogs

Featured blogs

04.06.2024

Weak DMARC security policies are exploited by APT43

Advanced Persistent Threat (APT) group APT43, originating from North Korea and known for its espionage activities, is currently exploiting poorly configured or unconfigured DMARC policies.

12.01.2024

QR-Code Phishing: Navigating the New Frontier in Cybersecurity with Microsoft Defender for Office 365

In the realm of cybersecurity, the advent of QR-code phishing has introduced a novel challenge, reshaping the dynamics of digital threats and defenses. QR-code phishing, or 'Quishing,' is a tactic where QR codes are manipulated to facilitate phishing attacks.

Phishing

14.09.2023

CVE-2023-38831 & CVE-2023-40477 - WinRAR Zero-days

CVE-2023-38831 identifies a file extension spoofing vulnerability in WinRAR, a popular Windows tool for compressing and decompressing files. This flaw allowed clever individuals to create ZIP or RAR files that appeared ordinary but were structured in a way that concealed malicious code.