High WID-SEC-2024-0275 4 CVEs

Microsoft Edge: Mehrere Schwachstellen ermöglichen Codeausführung

Published Feb 1, 2024 · Updated Feb 18, 2024 · Revision 2 · de-DE

Vendor: gentoo Vendor: Microsoft Product: Edge Product: Linux Platform: Android Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen.

Product

Edge ist ein Web Browser von Microsoft.

Vulnerabilities 4

High 8.8

CVE-2024-1059

Use after free in Peer Connection in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exp…

Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine

Jan 30, 2024
High 8.8

CVE-2024-1060

Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap…

Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine

Jan 30, 2024
High 8.8

CVE-2024-1077

Use after free in Network in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit hea…

Google Chrome chromium qt6-qtwebengine Browsers Debian Alpine

Jan 30, 2024
High 8.3

CVE-2024-21399

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Feb 2, 2024

Revision history

2024-02-18 #2
Neue Updates von Gentoo aufgenommen
2024-02-01 #1
Initiale Fassung

References

Release notes for Microsoft Edge Security Updates vom 2024-02-01
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#february-1-2024
Gentoo Linux Security Advisory GLSA-202402-23 vom 2024-02-19
https://security.gentoo.org/glsa/202402-23