DeutschShown in its original language — a full translation is planned for a future version.
Microsoft Edge: Mehrere Schwachstellen
view advisory published 2024-06-13
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Zustand herbeizuführen, um Sicherheitsmechanismen zu umgehen, den Benutzer zu täuschen und potenziell weitere, nicht näher beschriebene Auswirkungen zu erzielen.
01
describes (21)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-38083US | — | — | ||
Microsoft Edge (Chromium-based) Spoofing Vulnerability | ||||
| CVE-2024-30058US | — | — | ||
Microsoft Edge (Chromium-based) Spoofing Vulnerability | ||||
| CVE-2024-30057US | — | — | ||
Microsoft Edge for iOS Spoofing Vulnerability | ||||
| CVE-2024-5847US | high8.8 | — | ||
Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severit… | ||||
| CVE-2024-5846US | high8.8 | — | ||
Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severit… | ||||
| CVE-2024-5845US | high8.8 | — | ||
Use after free in Audio in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity… | ||||
| CVE-2024-5844US | high8.8 | — | ||
Heap buffer overflow in Tab Strip in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium secur… | ||||
| CVE-2024-5843US | medium6.5 | — | ||
Inappropriate implementation in Downloads in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to obfuscate security UI via a malicious file. (Chromium security severi… | ||||
| CVE-2024-5842US | high8.8 | — | ||
Use after free in Browser UI in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform an out of bounds me… | ||||
| CVE-2024-5841US | high8.8 | — | ||
Use after free in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:… | ||||
| CVE-2024-5840US | medium6.5 | — | ||
Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity:… | ||||
| CVE-2024-5839US | medium6.5 | — | ||
Inappropriate Implementation in Memory Allocator in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… | ||||
| CVE-2024-5838US | high8.8 | — | ||
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity:… | ||||
| CVE-2024-5837US | high8.8 | — | ||
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium securit… | ||||
| CVE-2024-5836US | high8.8 | — | ||
Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code… | ||||
| CVE-2024-5835US | high8.8 | — | ||
Heap buffer overflow in Tab Groups in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit h… | ||||
| CVE-2024-5834US | high8.8 | — | ||
Inappropriate implementation in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severit… | ||||
| CVE-2024-5833US | high8.8 | — | ||
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium securit… | ||||
| CVE-2024-5832US | high8.8 | — | ||
Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity… | ||||
| CVE-2024-5831US | high8.8 | — | ||
Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity… | ||||
showing 20 of 21
02
references
External citations — patches, advisories, analysis.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan