Microsoft Edge: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 11

• Critical 9.8
  CVE-2024-1676 EPSS 18%

  Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof s…

  Google Chrome chromium chromium Browsers Debian Alpine Wolfi
  Feb 21, 2024
• High 8.8
  CVE-2024-1670

  Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap co…

  Google Chrome chromium chromium Browsers Debian Alpine Wolfi
  Feb 21, 2024
• High 8.8
  CVE-2024-1672

  Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attack…

  Google Chrome chromium chromium Browsers Debian Alpine Wolfi
  Feb 21, 2024
• High 8.8
  CVE-2024-1673

  Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised t…

  Google Chrome chromium chromium Browsers Debian Wolfi
  Feb 21, 2024
• High 8.8
  CVE-2024-1675 EPSS 11%

  Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass…

  Google Chrome chromium chromium Browsers Debian Wolfi
  Feb 21, 2024
• High 8.2
  CVE-2024-26192

  Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

  Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

  Microsoft Microsoft Edge (Chromium-based) Browsers
  Feb 23, 2024
• Medium 6.5
  CVE-2024-1669

  Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out o…

  Google Chrome chromium chromium Browsers Debian Wolfi
  Feb 21, 2024
• Medium 6.5
  CVE-2024-1671

  Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to byp…

  Google Chrome chromium chromium Browsers Debian Alpine Wolfi
  Feb 21, 2024
• Medium 6.3
  CVE-2024-1674

  Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass …

  Google Chrome chromium chromium Browsers Debian Wolfi
  Feb 21, 2024
• Medium 4.8
  CVE-2024-21423

  Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

  Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

  Microsoft Microsoft Edge (Chromium-based) Browsers
  Feb 23, 2024
• Medium 4.3
  CVE-2024-26188

  Microsoft Edge (Chromium-based) Spoofing Vulnerability

  Microsoft Edge (Chromium-based) Spoofing Vulnerability

  Microsoft Microsoft Edge for Android Android Browsers
  Feb 23, 2024

Revision history

1. 2024-02-25 #1

   Initiale Fassung

References

• Microsoft Security Update - Edge vom 2024-02-25
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-1669
• Microsoft Security Update - Edge vom 2024-02-25
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-1670
• Microsoft Security Update - Edge vom 2024-02-25
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-1671
• Microsoft Security Update - Edge vom 2024-02-25
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-1672
• Microsoft Security Update - Edge vom 2024-02-25
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-1673
• Microsoft Security Update - Edge vom 2024-02-25
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-1674
• Microsoft Security Update - Edge vom 2024-02-25
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-1675
• Microsoft Security Update - Edge vom 2024-02-25
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-1676
• Microsoft Security Update - Edge vom 2024-02-25
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21423
• Microsoft Security Update - Edge vom 2024-02-25
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26188
• Microsoft Security Update - Edge vom 2024-02-25
  https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26192