DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Microsoft Edge: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2024-02-25
Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Microsoft Edge ausnutzen, um vertrauliche Informationen offenzulegen, Dateien zu manipulieren oder einen nicht spezifizierten Angriff durchzuführen.
01
beschreibt (11)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-26192US | — | — | ||
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | ||||
| CVE-2024-26188US | — | — | ||
Microsoft Edge (Chromium-based) Spoofing Vulnerability | ||||
| CVE-2024-21423US | — | — | ||
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability | ||||
| CVE-2024-1676US | medium5.4 | — | ||
Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to spoof security UI via a crafted HTML page. (Chromium security severi… | ||||
| CVE-2024-1675US | high8.8 | — | ||
Insufficient policy enforcement in Download in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page. (Chromium s… | ||||
| CVE-2024-1674US | high8.8 | — | ||
Inappropriate implementation in Navigation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium se… | ||||
| CVE-2024-1673US | high8.8 | — | ||
Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption vi… | ||||
| CVE-2024-1672US | medium5.4 | — | ||
Inappropriate implementation in Content Security Policy in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page.… | ||||
| CVE-2024-1671US | medium6.5 | — | ||
Inappropriate implementation in Site Isolation in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to bypass content security policy via a crafted HTML page. (Chromiu… | ||||
| CVE-2024-1670US | high8.8 | — | ||
Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity… | ||||
| CVE-2024-1669US | high8.8 | — | ||
Out of bounds memory access in Blink in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium sec… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- Microsoft Security Update - Edge vom 2024-02-25external
- Microsoft Security Update - Edge vom 2024-02-25external
- Microsoft Security Update - Edge vom 2024-02-25external
- Microsoft Security Update - Edge vom 2024-02-25external
- Microsoft Security Update - Edge vom 2024-02-25external
- Microsoft Security Update - Edge vom 2024-02-25external
- Microsoft Security Update - Edge vom 2024-02-25external
- Microsoft Security Update - Edge vom 2024-02-25external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan