CVE-2023-36029

CVE-2023-36029 is a spoofing vulnerability affecting Microsoft Edge (Chromium-based) browsers. With a CVSS score of 4.3 (MEDIUM), it requires user interaction (UI:R) for exploitation, where an attacker could trick a user into believing they are interacting with a legitimate source, potentially leading to information disclosure (I:L). There is currently no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit or ExploitDB. Despite its low CVSS score, the vulnerability has garnered some community discussion and media coverage, indicating a degree of awareness.