Medium WID-SEC-2023-2378 3 CVEs

Microsoft Edge: Mehrere Schwachstellen

Published Sep 17, 2023 · Updated Feb 4, 2024 · Revision 2 · de-DE

Vendor: gentoo Vendor: Microsoft Product: Edge < 117.0.2045.31 Product: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft Edge ausnutzen, um seine Privilegien zu erhöhen oder Dateien zu manipulieren.

Product

Edge ist ein Web Browser von Microsoft.

Vulnerabilities 3

Critical 9.6

CVE-2023-36735

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Sep 15, 2023
High 7.1

CVE-2023-36562

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Sep 15, 2023
Medium 6.1

CVE-2023-36727

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Edge (Chromium-based) Spoofing Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Sep 15, 2023

Revision history

2024-02-04 #2
Neue Updates von Gentoo aufgenommen
2023-09-17 #1
Initiale Fassung

References

Microsoft Security Advisory vom 2023-09-17
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36562
Microsoft Security Advisory vom 2023-09-17
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36735
Microsoft Security Advisory vom 2023-09-17
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36727
Gentoo Linux Security Advisory GLSA-202402-05 vom 2024-02-03
https://security.gentoo.org/glsa/202402-05