DeutschShown in its original language — a full translation is planned for a future version.
Microsoft Edge: Mehrere Schwachstellen
view advisory published 2024-02-25
Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Microsoft Edge ausnutzen, um vertrauliche Informationen offenzulegen, Dateien zu manipulieren oder einen nicht spezifizierten Angriff durchzuführen.
01
describes (11)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-26192US | — | — | ||
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | ||||
| CVE-2024-26188US | — | — | ||
Microsoft Edge (Chromium-based) Spoofing Vulnerability | ||||
| CVE-2024-21423US | — | — | ||
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | ||||
| CVE-2024-1676US | medium5.4 | — | ||
Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severi… | ||||
| CVE-2024-1675US | high8.8 | — | ||
Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. (Chromium s… | ||||
| CVE-2024-1674US | high8.8 | — | ||
Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium se… | ||||
| CVE-2024-1673US | high8.8 | — | ||
Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption vi… | ||||
| CVE-2024-1672US | medium5.4 | — | ||
Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page.… | ||||
| CVE-2024-1671US | medium6.5 | — | ||
Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromiu… | ||||
| CVE-2024-1670US | high8.8 | — | ||
Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity… | ||||
| CVE-2024-1669US | high8.8 | — | ||
Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium sec… | ||||
02
references
External citations — patches, advisories, analysis.
- Microsoft Security Update - Edge vom 2024-02-25external
- Microsoft Security Update - Edge vom 2024-02-25external
- Microsoft Security Update - Edge vom 2024-02-25external
- Microsoft Security Update - Edge vom 2024-02-25external
- Microsoft Security Update - Edge vom 2024-02-25external
- Microsoft Security Update - Edge vom 2024-02-25external
- Microsoft Security Update - Edge vom 2024-02-25external
- Microsoft Security Update - Edge vom 2024-02-25external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan