High 1 exploited CVE WID-SEC-2024-1176 5 CVEs

Microsoft Edge: Mehrere Schwachstellen

Published May 16, 2024 · Updated May 16, 2024 · de-DE

Vendor: Microsoft Product: Edge Platform: Android Platform: Windows

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen oder vertrauliche Informationen offenlegen.

Product

Edge ist ein Web Browser von Microsoft.

Vulnerabilities 5

Critical 9.6

CVE-2024-4947 Exploited Public exploit EPSS 15%

Type Confusion in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to execute arbitrary code inside…

Google Chrome chromium chromium Browsers Debian Wolfi

May 15, 2024
KEV May 20, 2024
Critical 9.6

CVE-2024-4949

Use after free in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to potentially exploit heap corr…

Google Chrome chromium chromium Browsers Debian Wolfi

May 15, 2024
High 8.8

CVE-2024-4948

Use after free in Dawn in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to potentially exploit heap co…

Google Chrome chromium chromium Browsers Debian Wolfi

May 15, 2024
High 7.1

CVE-2024-30056 Public exploit

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

May 25, 2024
Medium 5.3

CVE-2024-4950

Inappropriate implementation in Downloads in Google Chrome prior to 125.0.6422.60 allowed a remote attacker who convinc…

Google Chrome chromium chromium Browsers Debian Wolfi

May 15, 2024

Revision history

2024-05-16 #1
Initiale Fassung

References

Release notes for Microsoft Edge Security Updates vom 2024-05-16
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#may-16-2024