Medium WID-SEC-2023-2875 4 CVEs

Microsoft Edge: Mehrere Schwachstellen

Published Nov 9, 2023 · Updated Nov 12, 2023 · Revision 2 · de-DE

Vendor: Fedora Vendor: Microsoft Product: Edge Product: Edge < 118.0.2088.102 Product: Edge < 119.0.2151.58 Product: Linux Platform: Android Platform: Windows

Summary

Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Microsoft Edge ausnutzen, um beliebigen Code auszuführen und um Sicherheitsmechanismen zu umgehen.

Product

Edge ist ein Web Browser von Microsoft.

Vulnerabilities 4

High 7.3

CVE-2023-36014

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Nov 9, 2023
High 7.1

CVE-2023-36024

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Microsoft Edge (Chromium-based) Extended Stable Browsers

Nov 9, 2023
High 7.1

CVE-2023-36027

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Microsoft Edge (Chromium-based) Extended Stable Browsers

Nov 10, 2023
Unscored —

CVE-2023-5996

Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to potentially exploit he…

Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine

Nov 8, 2023

Revision history

2023-11-12 #2
Neue Updates von Fedora aufgenommen
2023-11-09 #1
Initiale Fassung

References

Fedora Security Advisory FEDORA-EPEL-2023-ECA2DAF875 vom 2023-11-10
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2023-eca2daf875
Release notes for Microsoft Edge Security Updates vom 2023-11-09
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#november-9-2023