CVE-2023-33145
Microsoft Edge Chromium ≤ 114.0.1823.51
Raw vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NCVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.
Summary
CVE-2023-33145 is a medium-severity an unspecified weakness vulnerability in Microsoft Edge Chromium. Its CVSS base score is 6.5 (Medium).
Operationally, ranked in the top 5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis AI-assisted summary
Synthesised by an AI model from the NVD description and linked references — a reading aid, not an authoritative source.
Microsoft Edge (Chromium-based) contains an information disclosure vulnerability tracked as CVE-2023-33145. The flaw received a CVSS 3.1 score of 6.5 with a vector indicating network attack vector, low complexity, no required privileges, and required user interaction, resulting in high impact to confidentiality while leaving integrity and availability unaffected.
An unauthenticated remote attacker can exploit the issue by convincing a user to visit a specially crafted web page in Microsoft Edge. Successful exploitation discloses sensitive information from the browser process without further user action beyond page visitation.
Microsoft has published remediation guidance in its Security Response Center update guide for CVE-2023-33145, and Gentoo Linux has issued GLSA-202402-05 addressing the vulnerability in affected packages. The associated EPSS score has remained flat at 0.0744 with no material increase since disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-37330
Vulnerability Data
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
- CWE(s)
Related Threats
CVEs Like This One
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.