First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2024-43472

HighCVSS 8.3/10Last modified Jun 17, 2026

Description

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Metrics

CVSS 3.1 8.3/10CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

Affected software

No affected versions have been published.

Timeline

Published: Aug 16, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-434747.5Microsoft SQL Server Information Disclosure Vulnerability CVE-2024-434757.3Microsoft Windows Admin Center Information Disclosure Vulnerability CVE-2024-434765.4Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability CVE-2024-434777.5Improper access control in Decentralized Identity Services resulted in a vulnerability that allows an unauthenticated attacker to disable Ve CVE-2024-434798.5Microsoft Power Automate Desktop Remote Code Execution Vulnerability CVE-2024-43484.3A vulnerability, which was classified as problematic, was found in osCommerce 4. Affected is an unknown function of the file /catalog/all-pr CVE-2024-434806.6Azure Service Fabric for Linux Remote Code Execution Vulnerability CVE-2024-434818.8Power BI Report Server Spoofing Vulnerability CVE-2024-434826.5Microsoft Outlook for iOS Information Disclosure Vulnerability CVE-2024-434837.5.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2024-434847.5.NET, .NET Framework, and Visual Studio Denial of Service Vulnerability CVE-2024-434857.5.NET and Visual Studio Denial of Service Vulnerability

CVE-2024-43472: High severity, CVSS 8.3 | Vulnix