DeutschShown in its original language — a full translation is planned for a future version.
Microsoft Edge: Mehrere Schwachstellen
view advisory published 2023-07-23
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft Edge ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, einen Denial-of-Service-Zustand herbeizuführen, seine Privilegien zu erweitern und Daten zu manipulieren.
01
describes (14)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-3740US | medium4.3 | — | ||
Insufficient validation of untrusted input in Themes in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially serve malicious content to a user via a crafte… | ||||
| CVE-2023-3738US | medium4.3 | — | ||
Inappropriate implementation in Autofill in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chromium security seve… | ||||
| CVE-2023-3737US | medium4.3 | — | ||
Inappropriate implementation in Notifications in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to spoof the contents of media notifications via a crafted HTML page… | ||||
| CVE-2023-3736US | medium4.3 | — | ||
Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 115.0.5790.98 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromiu… | ||||
| CVE-2023-3735US | medium4.3 | — | ||
Inappropriate implementation in Web API Permission Prompts in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to obfuscate security UI via a crafted HTML page. (Chro… | ||||
| CVE-2023-3734US | medium4.3 | — | ||
Inappropriate implementation in Picture In Picture in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via… | ||||
| CVE-2023-3733US | medium4.3 | — | ||
Inappropriate implementation in WebApp Installs in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a c… | ||||
| CVE-2023-3732US | high8.8 | — | ||
Out of bounds memory access in Mojo in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruptio… | ||||
| CVE-2023-3730US | high8.8 | — | ||
Use after free in Tab Groups in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit hea… | ||||
| CVE-2023-3728US | high8.8 | — | ||
Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severi… | ||||
| CVE-2023-3727US | high8.8 | — | ||
Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severi… | ||||
| CVE-2023-38187US | — | — | ||
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | ||||
| CVE-2023-38173US | — | — | ||
Microsoft Edge for Android Spoofing Vulnerability | ||||
| CVE-2023-35392US | — | — | ||
Microsoft Edge (Chromium-based) Spoofing Vulnerability | ||||
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan