WID-SEC-W-2024-2129

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Microsoft Edge: Mehrere Schwachstellen

view advisory published 2024-09-11

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen, vertrauliche Informationen offenzulegen oder einen unspezifischen Angriff durchzuführen.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2024-38222USmedium6.5OT elevated—
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
CVE-2024-8362UShigh8.8—
Use after free in WebAudio in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security sev…
CVE-2024-7970UShigh8.8—
Out of bounds write in V8 in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security seve…
CVE-2024-8198UShigh8.8Exploit
Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.113 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via…
CVE-2024-8194UShigh8.8—
Type Confusion in V8 in Google Chrome prior to 128.0.6613.113 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan