DeutschShown in its original language — a full translation is planned for a future version.
Microsoft Edge: Mehrere Schwachstellen
view advisory published 2024-01-25
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft Edge ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, Informationen falsch darzustellen und nicht spezifizierte Auswirkungen zu verursachen.
01
describes (18)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-21388US | — | Exploit | ||
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | ||||
| CVE-2024-21336US | — | — | ||
Microsoft Edge (Chromium-based) Spoofing Vulnerability | ||||
| CVE-2024-21387US | — | — | ||
Microsoft Edge for Android Spoofing Vulnerability | ||||
| CVE-2024-21385US | — | — | ||
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | ||||
| CVE-2024-21383US | — | — | ||
Microsoft Edge (Chromium-based) Spoofing Vulnerability | ||||
| CVE-2024-21382US | — | — | ||
Microsoft Edge for Android Information Disclosure Vulnerability | ||||
| CVE-2024-21326US | — | — | ||
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | ||||
| CVE-2024-0814US | medium6.5 | — | ||
Incorrect security UI in Payments in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. (Chromium security sev… | ||||
| CVE-2024-0813US | high8.8 | — | ||
Use after free in Reading Mode in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corrupt… | ||||
| CVE-2024-0812US | high8.8 | — | ||
Inappropriate implementation in Accessibility in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (C… | ||||
| CVE-2024-0811US | medium4.3 | — | ||
Inappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to leak cross-origi… | ||||
| CVE-2024-0810US | medium4.3 | — | ||
Insufficient policy enforcement in DevTools in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin d… | ||||
| CVE-2024-0809US | medium4.3 | — | ||
Inappropriate implementation in Autofill in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. (Chromium securi… | ||||
| CVE-2024-0808US | critical9.8 | — | ||
Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file. (Chromium security severit… | ||||
| CVE-2024-0807US | high8.8 | — | ||
Use after free in Web Audio in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security sev… | ||||
| CVE-2024-0806US | high8.8 | — | ||
Use after free in Passwords in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction. (Chromium security… | ||||
| CVE-2024-0805US | medium4.3 | — | ||
Inappropriate implementation in Downloads in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Chromium security… | ||||
| CVE-2024-0804US | high7.5 | — | ||
Insufficient policy enforcement in iOS Security UI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium se… | ||||
02
references
External citations — patches, advisories, analysis.
- Fedora Security Advisory FEDORA-EPEL-2024-44533EB648 vom 2024-01-27external
- Fedora Security Advisory FEDORA-EPEL-2024-93D34F40F0 vom 2024-01-27external
- Release notes for Microsoft Edge Security Updates vom 2024-01-25external
- Gentoo Linux Security Advisory GLSA-202402-23 vom 2024-02-19external
- WID-SEC-W-2024-0220 - CSAF Versionself
- WID-SEC-2024-0220 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan