Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft Edge ausnutzen, um Spoofing-Angriffe durchzuführen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.
Product
Edge ist ein Web Browser von Microsoft.
Vulnerabilities 3
-
High 7.5
Copilot Chat (Microsoft Edge) Information Disclosure Vulnerability
Improper neutralization of special elements used in a command ('command injection') in Copilot Chat (Microsoft Edge) allows an unauthorized attacker to disclose information over a network.
-
Medium 6.5
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
-
Medium 4.3
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2026-29633, EUVD-2026-29715
-
#1
Initiale Fassung
References
-
Microsoft Security Update Guide vom 2026-05-11
https://msrc.microsoft.com/update-guide/
-
Microsoft Edge CVE-2026-35429 vom 2026-05-11
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-35429
-
Microsoft Edge CVE-2026-42891 vom 2026-05-11
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-42891
-
Microsoft Edge (Copilot Chat) CVE-2026-33111 vom 2026-05-11
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-33111