DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Microsoft Edge: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2024-01-25
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft Edge ausnutzen, um seine Privilegien zu erhöhen, beliebigen Code auszuführen, vertrauliche Informationen offenzulegen, Informationen falsch darzustellen und nicht spezifizierte Auswirkungen zu verursachen.
01
beschreibt (18)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-21388US | — | Exploit | ||
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | ||||
| CVE-2024-21336US | — | — | ||
Microsoft Edge (Chromium-based) Spoofing Vulnerability | ||||
| CVE-2024-21387US | — | — | ||
Microsoft Edge for Android Spoofing Vulnerability | ||||
| CVE-2024-21385US | — | — | ||
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | ||||
| CVE-2024-21383US | — | — | ||
Microsoft Edge (Chromium-based) Spoofing Vulnerability | ||||
| CVE-2024-21382US | — | — | ||
Microsoft Edge for Android Information Disclosure Vulnerability | ||||
| CVE-2024-21326US | — | — | ||
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability | ||||
| CVE-2024-0814US | medium6.5 | — | ||
Incorrect security UI in Payments in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. (Chromium security sev… | ||||
| CVE-2024-0813US | high8.8 | — | ||
Use after free in Reading Mode in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corrupt… | ||||
| CVE-2024-0812US | high8.8 | — | ||
Inappropriate implementation in Accessibility in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (C… | ||||
| CVE-2024-0811US | medium4.3 | — | ||
Inappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to leak cross-origi… | ||||
| CVE-2024-0810US | medium4.3 | — | ||
Insufficient policy enforcement in DevTools in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin d… | ||||
| CVE-2024-0809US | medium4.3 | — | ||
Inappropriate implementation in Autofill in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. (Chromium securi… | ||||
| CVE-2024-0808US | critical9.8 | — | ||
Integer underflow in WebUI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a malicious file. (Chromium security severit… | ||||
| CVE-2024-0807US | high8.8 | — | ||
Use after free in Web Audio in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security sev… | ||||
| CVE-2024-0806US | high8.8 | — | ||
Use after free in Passwords in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction. (Chromium security… | ||||
| CVE-2024-0805US | medium4.3 | — | ||
Inappropriate implementation in Downloads in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to perform domain spoofing via a crafted domain name. (Chromium security… | ||||
| CVE-2024-0804US | high7.5 | — | ||
Insufficient policy enforcement in iOS Security UI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium se… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Fedora Security Advisory FEDORA-EPEL-2024-44533EB648 vom 2024-01-27external
- Fedora Security Advisory FEDORA-EPEL-2024-93D34F40F0 vom 2024-01-27external
- Release notes for Microsoft Edge Security Updates vom 2024-01-25external
- Gentoo Linux Security Advisory GLSA-202402-23 vom 2024-02-19external
- WID-SEC-W-2024-0220 - CSAF Versionself
- WID-SEC-2024-0220 - Portal Versionself
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan