DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Microsoft Edge: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2024-06-13
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen, um einen Denial of Service Zustand herbeizuführen, um Sicherheitsmechanismen zu umgehen, den Benutzer zu täuschen und potenziell weitere, nicht näher beschriebene Auswirkungen zu erzielen.
01
beschreibt (21)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-38083US | — | — | ||
Microsoft Edge (Chromium-based) Spoofing Vulnerability | ||||
| CVE-2024-30058US | — | — | ||
Microsoft Edge (Chromium-based) Spoofing Vulnerability | ||||
| CVE-2024-30057US | — | — | ||
Microsoft Edge for iOS Spoofing Vulnerability | ||||
| CVE-2024-5847US | high8.8 | — | ||
Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severit… | ||||
| CVE-2024-5846US | high8.8 | — | ||
Use after free in PDFium in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severit… | ||||
| CVE-2024-5845US | high8.8 | — | ||
Use after free in Audio in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity… | ||||
| CVE-2024-5844US | high8.8 | — | ||
Heap buffer overflow in Tab Strip in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium secur… | ||||
| CVE-2024-5843US | medium6.5 | — | ||
Inappropriate implementation in Downloads in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to obfuscate security UI via a malicious file. (Chromium security severi… | ||||
| CVE-2024-5842US | high8.8 | — | ||
Use after free in Browser UI in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform an out of bounds me… | ||||
| CVE-2024-5841US | high8.8 | — | ||
Use after free in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity:… | ||||
| CVE-2024-5840US | medium6.5 | — | ||
Policy bypass in CORS in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. (Chromium security severity:… | ||||
| CVE-2024-5839US | medium6.5 | — | ||
Inappropriate Implementation in Memory Allocator in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (… | ||||
| CVE-2024-5838US | high8.8 | — | ||
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity:… | ||||
| CVE-2024-5837US | high8.8 | — | ||
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium securit… | ||||
| CVE-2024-5836US | high8.8 | — | ||
Inappropriate Implementation in DevTools in Google Chrome prior to 126.0.6478.54 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code… | ||||
| CVE-2024-5835US | high8.8 | — | ||
Heap buffer overflow in Tab Groups in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit h… | ||||
| CVE-2024-5834US | high8.8 | — | ||
Inappropriate implementation in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severit… | ||||
| CVE-2024-5833US | high8.8 | — | ||
Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium securit… | ||||
| CVE-2024-5832US | high8.8 | — | ||
Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity… | ||||
| CVE-2024-5831US | high8.8 | — | ||
Use after free in Dawn in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity… | ||||
20 von 21 angezeigt
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan