CVE-2023-36880

Medium4.8 Published on Dec 7, 2023

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

CVSS score4.8 / 10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Vendorsmicrosoft

Affected products

Vendors	Product	Versions
microsoft	edge chromium	< 120.0.2210.61

Vulnerabilities

CVE-2026-83498 Lets Local Attackers Run Code Inside a Windows VBS Enclave

Microsoft fixed CVE-2026-83498 in SFAPE.dll; Doyensec lab research shows low-privilege local code could run inside the VBS enclave, without password theft.

Oct 14, 202609:57 4 min readRead

This product uses the NVD API but is not endorsed or certified by the NVD.

CVE database

CVE-2023-36880

Affected products

Related articles

CVE-2026-83498 Lets Local Attackers Run Code Inside a Windows VBS Enclave

Audience measurement