Medium WID-SEC-2023-1857 14 CVEs

Microsoft Edge: Mehrere Schwachstellen

Published Jul 23, 2023 · Updated Jul 23, 2023 · de-DE

Vendor: Microsoft Product: Edge Product: Edge Extended Stable Channel < 114.0.1823.90 Product: Edge Stable Channel < 115.0.1901.183 Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft Edge ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, seine Privilegien zu erweitern und Daten zu manipulieren.

Product

Edge ist ein Web Browser von Microsoft.

Vulnerabilities 14

Medium 6.5

CVE-2023-38187

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Jul 21, 2023
Medium 4.7

CVE-2023-35392

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Jul 21, 2023
Medium 4.3

CVE-2023-3735

Inappropriate implementation in Web API Permission Prompts in Google Chrome prior to 115.0.5790.98 allowed a remote att…

Google Chrome chromium Browsers Debian

Aug 1, 2023
Medium 4.3

CVE-2023-38173

Microsoft Edge for Android Spoofing Vulnerability

Microsoft Edge for Android Spoofing Vulnerability

Microsoft Microsoft Edge for Android Android Browsers

Jul 21, 2023
Unscored —

CVE-2023-3727

Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap …

Google Chrome chromium Browsers Debian

Aug 1, 2023
Unscored —

CVE-2023-3728

Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap …

Google Chrome chromium Browsers Debian

Aug 1, 2023
Unscored —

CVE-2023-3730

Use after free in Tab Groups in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who convinced a user to …

Google Chrome chromium Browsers Debian

Aug 1, 2023
Unscored —

CVE-2023-3732

Out of bounds memory access in Mojo in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromis…

Google Chrome chromium Browsers Debian

Aug 1, 2023
Unscored —

CVE-2023-3733

Inappropriate implementation in WebApp Installs in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to po…

Google Chrome chromium Browsers Debian

Aug 1, 2023
Unscored —

CVE-2023-3734

Inappropriate implementation in Picture In Picture in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to…

Google Chrome chromium Browsers Debian

Aug 1, 2023
Unscored —

CVE-2023-3736

Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 115.0.5790.98 allowed a remote attacke…

Google Chrome chromium Browsers Debian

Aug 1, 2023
Unscored —

CVE-2023-3737

Inappropriate implementation in Notifications in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to spoo…

Google Chrome chromium Browsers Debian

Aug 1, 2023
Unscored —

CVE-2023-3738

Inappropriate implementation in Autofill in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to obfuscate…

Google Chrome chromium Browsers Debian

Aug 1, 2023
Unscored —

CVE-2023-3740

Insufficient validation of untrusted input in Themes in Google Chrome prior to 115.0.5790.98 allowed a remote attacker …

Google Chrome chromium Browsers Debian

Aug 1, 2023

Revision history

2023-07-23 #1
Initiale Fassung

References

Microsoft Edge Security Advisory vom 2023-07-23
https://docs.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security