Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft Edge ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Rechte zu erweitern und weitere, nicht spezifizierte Auswirkungen zu erzielen.
Product
Edge ist ein Web Browser von Microsoft.
Vulnerabilities 15
-
High 8.8
Out of bounds write in Swiftshader in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exp…
-
High 8.8
Use after free in Extensions in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to instal…
-
High 8.8
Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap cor…
-
High 8.8
Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap cor…
-
High 8.8
Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap cor…
-
High 8.8
Out of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially ex…
-
High 8.8CVE-2023-2935 EPSS 24%
Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corr…
-
High 8.8CVE-2023-2936 EPSS 23%
Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corr…
-
High 7.8
Insufficient data validation in Installer in Google Chrome on Windows prior to 114.0.5735.90 allowed a local attacker t…
-
High 7.5
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
-
Medium 6.5
Inappropriate implementation in Downloads in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a u…
-
Medium 6.1
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
-
Medium 4.3
Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker wh…
-
Medium 4.3
Inappropriate implementation in Picture In Picture in Google Chrome prior to 114.0.5735.90 allowed a remote attacker wh…
-
Medium 4.3
Inappropriate implementation in Extensions API in Google Chrome prior to 114.0.5735.90 allowed an attacker who convince…
Revision history
-
#2
Neue Updates von Gentoo aufgenommen
-
#1
Initiale Fassung
References
-
Microsoft Edge Release Notes vom 2023-06-04
https://docs.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security
-
Gentoo Linux Security Advisory GLSA-202402-05 vom 2024-02-03
https://security.gentoo.org/glsa/202402-05