CVE-2023-29350
📋 TL;DR
This vulnerability in Microsoft Edge allows attackers to gain elevated privileges on affected systems. It affects users running vulnerable versions of Microsoft Edge on Windows systems. Successful exploitation could let attackers execute code with higher privileges than intended.
💻 Affected Systems
- Microsoft Edge (Chromium-based)
📦 What is this software?
Edge Chromium by Microsoft
⚠️ Risk & Real-World Impact
Worst Case
Complete system compromise allowing attackers to install programs, view/change/delete data, or create new accounts with full user rights.
Likely Case
Local privilege escalation allowing attackers to gain administrative privileges on the compromised system.
If Mitigated
Limited impact if systems are fully patched and running with least privilege principles.
🎯 Exploit Status
Requires local access to the system and user interaction to trigger the vulnerability.
🛠️ Fix & Mitigation
✅ Official Fix
Patch Version: Microsoft Edge version 113.0.1774.50 or later
Vendor Advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-29350
Restart Required: Yes
Instructions:
1. Open Microsoft Edge. 2. Click Settings (three dots) → Help and feedback → About Microsoft Edge. 3. Browser will automatically check for and install updates. 4. Restart Edge when prompted.
🔧 Temporary Workarounds
Disable Microsoft Edge
windowsTemporarily disable Microsoft Edge until patching is possible
🧯 If You Can't Patch
- Implement application whitelisting to prevent unauthorized Edge execution
- Run Edge with least privilege user accounts (non-admin)
🔍 How to Verify
Check if Vulnerable:
Open Microsoft Edge → Settings → Help and feedback → About Microsoft Edge. Check if version is below 113.0.1774.50.Check Version:
msedge --versionVerify Fix Applied:
Verify Microsoft Edge version is 113.0.1774.50 or higher in About Microsoft Edge.📡 Detection & Monitoring
Log Indicators:
- Windows Event Logs showing unexpected Edge process elevation
- Security logs with privilege escalation attempts
Network Indicators:
- Unusual outbound connections from Edge processes with elevated privileges
SIEM Query:
EventID=4688 AND ProcessName="msedge.exe" AND NewProcessName contains elevated privilege indicators