High WID-SEC-2023-3085 3 CVEs

Microsoft Edge: Mehrere Schwachstellen

Published Dec 7, 2023 · Updated Feb 4, 2024 · Revision 2 · de-DE

Vendor: gentoo Vendor: Microsoft Product: Edge Stable Channel < 120.0.2210.61 Product: Linux Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft Edge ausnutzen, um seine Privilegien zu erhöhen und um Informationen offenzulegen.

Product

Edge ist ein Web Browser von Microsoft.

Vulnerabilities 3

Critical 9.6

CVE-2023-35618

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Dec 7, 2023
Medium 4.8

CVE-2023-36880

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Dec 7, 2023
Medium 4.3

CVE-2023-38174

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Dec 7, 2023

Revision history

2024-02-04 #2
Neue Updates von Gentoo aufgenommen
2023-12-07 #1
Initiale Fassung

References

Release notes for Microsoft Edge Security Updates vom 2023-12-07
https://docs.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security
Gentoo Linux Security Advisory GLSA-202402-05 vom 2024-02-03
https://security.gentoo.org/glsa/202402-05