Microsoft Edge: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 16

• Critical 9.8
  CVE-2024-3845

  Inappropriate implementation in Networks in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass mi…

  Google Chrome chromium chromium Browsers Debian Wolfi
  Apr 17, 2024
• Critical 9.8
  CVE-2024-3847

  Insufficient policy enforcement in WebUI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass co…

  Google Chrome chromium chromium Browsers Debian Wolfi
  Apr 17, 2024
• High 8.8
  CVE-2024-3832

  Object corruption in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit object…

  Google Chrome chromium chromium Browsers Debian Wolfi
  Apr 17, 2024
• High 8.8
  CVE-2024-3833 EPSS 18%

  Object corruption in WebAssembly in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially explo…

  Google Chrome chromium chromium Browsers Debian Wolfi
  Apr 17, 2024
• High 8.8
  CVE-2024-3834

  Use after free in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit he…

  Google Chrome chromium chromium Browsers Debian Wolfi
  Apr 17, 2024
• High 7.6
  CVE-2024-3841

  Insufficient data validation in Browser Switcher in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to i…

  Google Chrome chromium chromium Browsers Debian Wolfi
  Apr 17, 2024
• Medium 6.5
  CVE-2024-29987

  Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

  Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

  Microsoft Microsoft Edge (Chromium-based) Browsers
  Apr 18, 2024
• Medium 6.5
  CVE-2024-3839

  Out of bounds read in Fonts in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to obtain potentially sen…

  Google Chrome chromium chromium Browsers Debian Alpine Wolfi
  Apr 17, 2024
• Medium 6.5
  CVE-2024-3840

  Insufficient policy enforcement in Site Isolation in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to …

  Google Chrome chromium chromium Browsers Debian Alpine Wolfi
  Apr 17, 2024
• Medium 5.9
  CVE-2024-3837

  Use after free in QUIC in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who had compromised the render…

  Google Chrome chromium chromium Browsers Debian Alpine Wolfi
  Apr 17, 2024
• Medium 5.4
  CVE-2024-29986

  Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability

  Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability

  Microsoft Microsoft Edge (Chromium-based) Browsers
  Apr 18, 2024
• Medium 5.4
  CVE-2024-3846

  Inappropriate implementation in Prompts in Google Chrome prior to 124.0.6367.60 allowed a remote attacker who convinced…

  Google Chrome chromium chromium Browsers Debian Wolfi
  Apr 17, 2024
• Medium 5.0
  CVE-2024-29991

  Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

  Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

  Microsoft Microsoft Edge (Chromium-based) Browsers
  Apr 19, 2024
• Medium 4.6
  CVE-2024-3843

  Insufficient data validation in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform …

  Google Chrome chromium chromium Browsers Debian Wolfi
  Apr 17, 2024
• Medium 4.3
  CVE-2024-3838

  Inappropriate implementation in Autofill in Google Chrome prior to 124.0.6367.60 allowed an attacker who convinced a us…

  Google Chrome chromium chromium Browsers Debian Wolfi
  Apr 17, 2024
• Medium 4.3
  CVE-2024-3844

  Inappropriate implementation in Extensions in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to perform…

  Google Chrome chromium chromium Browsers Debian Wolfi
  Apr 17, 2024

Revision history

1. 2024-04-18 #1

   Initiale Fassung

References

• Release notes for Microsoft Edge Security Updates vom 2024-04-18
  https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#april-18-2024