Medium WID-SEC-2023-1979 12 CVEs

Microsoft Edge: Mehrere Schwachstellen

Published Aug 7, 2023 · Updated Aug 7, 2023 · de-DE

Vendor: Microsoft Product: Edge Product: Edge < 115.0.1901.200 Product: Edge < Extended Stable Channel 114.0.1823.106 Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Cross-Site-Scripting-Angriff durchzuführen oder Sicherheitsvorkehrungen zu umgehen.

Product

Edge ist ein Web Browser von Microsoft.

Vulnerabilities 12

Medium 6.5

CVE-2023-38157

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Aug 7, 2023
Unscored —

CVE-2023-4068 EPSS 16%

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write…

Google Chrome chromium Browsers Debian

Aug 3, 2023
Unscored —

CVE-2023-4069 EPSS 25%

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap cor…

Google Chrome chromium Browsers Debian

Aug 3, 2023
Unscored —

CVE-2023-4070

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write…

Google Chrome chromium Browsers Debian

Aug 3, 2023
Unscored —

CVE-2023-4071

Heap buffer overflow in Visuals in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially explo…

Google Chrome chromium qt5-qtwebengine Browsers Debian Alpine

Aug 3, 2023
Unscored —

CVE-2023-4072

Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially…

Google Chrome chromium Browsers Debian

Aug 3, 2023
Unscored —

CVE-2023-4073

Out of bounds memory access in ANGLE in Google Chrome on Mac prior to 115.0.5790.170 allowed a remote attacker to poten…

Google Chrome chromium Browsers Debian

Aug 3, 2023
Unscored —

CVE-2023-4074

Use after free in Blink Task Scheduling in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potential…

Google Chrome chromium qt5-qtwebengine Browsers Debian Alpine

Aug 3, 2023
Unscored —

CVE-2023-4075

Use after free in Cast in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap c…

Google Chrome chromium Browsers Debian

Aug 3, 2023
Unscored —

CVE-2023-4076

Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap…

Google Chrome chromium qt5-qtwebengine Browsers Debian Alpine

Aug 3, 2023
Unscored —

CVE-2023-4077

Insufficient data validation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a…

Google Chrome chromium Browsers Debian

Aug 3, 2023
Unscored —

CVE-2023-4078

Inappropriate implementation in Extensions in Google Chrome prior to 115.0.5790.170 allowed an attacker who convinced a…

Google Chrome chromium Browsers Debian

Aug 3, 2023

Revision history

2023-08-07 #1
Initiale Fassung

References

Microsoft Security Advisory vom 2023-08-07
https://docs.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security