Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA12243
HistoryJul 22, 2021 - 12:00 a.m.

KLA12243 Multiple vulnerabilities in Microsoft Browser

2021-07-2200:00:00
Kaspersky Lab
threats.kaspersky.com
14

9.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.01 Low

EPSS

Percentile

83.3%

JSON

Detect date:

07/22/2021

Severity:

High

Description:

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges, bypass security restrictions, obtain sensitive information, perform cross-site scripting attack, spoof user interface.

Exploitation:

Public exploits exist for this vulnerability.

Affected products:

Microsoft Edge (Chromium-based)

Solution:

Install necessary updates from the Settings and more menu, that are listed in your About Microsoft Edge page (Microsoft Edge About page usually can be accessed from the Help and feedback option)
Microsoft Edge update settings

Original advisories:

CVE-2021-30572
CVE-2021-30578
CVE-2021-30576
CVE-2021-36928
CVE-2021-30581
CVE-2021-30579
CVE-2021-30569
CVE-2021-30577
CVE-2021-36929
CVE-2021-30573
CVE-2021-30589
CVE-2021-30583
CVE-2021-30566
CVE-2021-30587
CVE-2021-30567
CVE-2021-36931
CVE-2021-30582
CVE-2021-30585
CVE-2021-30580
CVE-2021-30568
CVE-2021-30575
CVE-2021-30574
CVE-2021-30586
CVE-2021-30584
CVE-2021-30565
CVE-2021-30571
CVE-2021-30588

Impacts:

ACE

Related products:

Microsoft Edge

CVE-IDS:

CVE-2021-305719.6Critical
CVE-2021-305818.8Critical
CVE-2021-305777.8Critical
CVE-2021-305658.8Critical
CVE-2021-305868.8Critical
CVE-2021-305836.5High
CVE-2021-305874.3Warning
CVE-2021-305688.8Critical
CVE-2021-305826.5High
CVE-2021-305846.5High
CVE-2021-305758.8Critical
CVE-2021-305738.8Critical
CVE-2021-305768.8Critical
CVE-2021-305728.8Critical
CVE-2021-305678.8Critical
CVE-2021-305748.8Critical
CVE-2021-305798.8Critical
CVE-2021-305668.8Critical
CVE-2021-305698.8Critical
CVE-2021-305806.5High
CVE-2021-305894.3Warning
CVE-2021-305788.8Critical
CVE-2021-305888.8Critical
CVE-2021-305858.8Critical
CVE-2021-369286.0High
CVE-2021-369296.3High
CVE-2021-369314.4Warning

Microsoft official advisories:

References

Related

nessus 6
openvas 8
chrome 1
freebsd 1
archlinux 3
kaspersky 1
suse 2
fedora 3
cnvd 24
prion 24
cve 23
zdi 1
mscve 23
veracode 11
ubuntucve 20
alpinelinux 21
debiancve 21
githubexploit 3
mageia 1
redhatcve 2
nessus
nessus
Microsoft Edge (Chromium) < 92.0.902.55 Multiple Vulnerabilities
2021-07-22 00:00:00
Google Chrome < 92.0.4515.107 Multiple Vulnerabilities
2021-07-20 00:00:00
FreeBSD : chromium -- multiple vulnerabilities (76487640-ea29-11eb-a686-3065ec8fd3ec)
2021-07-22 00:00:00
openvas
openvas
Google Chrome Security Update (stable-channel-update-for-desktop_20-2021-07) - Mac OS X
2023-03-23 00:00:00
Google Chrome Security Update (stable-channel-update-for-desktop_20-2021-07) - Linux
2023-03-23 00:00:00
Google Chrome Security Update (stable-channel-update-for-desktop_20-2021-07) - Windows
2023-03-23 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2021-07-20 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2021-07-20 00:00:00
archlinux
archlinux
[ASA-202107-47] chromium: multiple issues
2021-07-21 00:00:00
[ASA-202108-5] opera: multiple issues
2021-08-10 00:00:00
[ASA-202107-74] vivaldi: multiple issues
2021-07-28 00:00:00
kaspersky
kaspersky
KLA12236 Multiple vulnerabilities in Google Chrome
2021-07-20 00:00:00
suse
suse
Security update for chromium (important)
2021-08-11 00:00:00
Security update for chromium (important)
2021-08-10 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: chromium-93.0.4577.63-1.fc35
2021-09-24 20:47:44
[SECURITY] Fedora 33 Update: chromium-93.0.4577.63-1.fc33
2021-09-13 03:49:46
[SECURITY] Fedora 34 Update: chromium-93.0.4577.63-1.fc34
2021-09-13 13:09:01
cnvd
cnvd
Microsoft Edge Information Disclosure Vulnerability (CNVD-2021-54694)
2021-07-26 00:00:00
Microsoft Edge Information Disclosure Vulnerability (CNVD-2021-54695)
2021-07-26 00:00:00
Microsoft Edge Information Disclosure Vulnerability (CNVD-2021-54696)
2021-07-26 00:00:00
prion
prion
Privilege escalation
2021-08-26 18:15:00
Privilege escalation
2021-08-26 18:15:00
Information disclosure
2021-08-26 18:15:00
cve
cve
CVE-2021-36931
2021-08-26 18:15:00
CVE-2021-36929
2021-08-26 18:15:00
CVE-2021-36928
2021-08-26 18:15:00
zdi
zdi
Microsoft Edge Installer Directory Junction Privilege Escalation Vulnerability
2021-08-03 00:00:00
mscve
mscve
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
2021-07-22 07:00:00
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
2021-07-22 07:00:00
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
2021-07-22 07:00:00
veracode
veracode
Denial Of Service
2021-07-24 04:08:24
Arbitrary Code Execution
2021-07-24 08:55:45
Arbitrary Code Execution
2021-07-24 08:55:35
ubuntucve
ubuntucve
CVE-2021-30575
2021-08-03 00:00:00
CVE-2021-30566
2021-08-03 00:00:00
CVE-2021-30579
2021-08-03 00:00:00
alpinelinux
alpinelinux
CVE-2021-30572
2021-08-03 20:15:00
CVE-2021-30565
2021-08-03 20:15:00
CVE-2021-30583
2021-08-03 20:15:00
debiancve
debiancve
CVE-2021-30579
2021-08-03 20:15:00
CVE-2021-30567
2021-08-03 20:15:00
CVE-2021-30566
2021-08-03 20:15:00
githubexploit
githubexploit
Exploit for Use After Free in Google Chrome
2021-10-25 13:25:23
Exploit for Use After Free in Google Chrome
2021-07-29 12:53:13
Exploit for Use After Free in Google Chrome
2021-10-26 07:44:27
mageia
mageia
Updated sqlite packages fix security vulnerability
2021-10-04 19:42:18
redhatcve
redhatcve
CVE-2021-30586
2022-05-20 23:24:24
CVE-2021-30577
2022-05-21 00:07:30

9.6 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

7.2 High

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

0.01 Low

EPSS

Percentile

83.3%

JSON
Related for KLA12243
nessus6openvas8chrome1freebsd1archlinux3kaspersky1suse2fedora3cnvd24prion24cve23zdi1mscve23veracode11ubuntucve20alpinelinux21debiancve21githubexploit3mageia1redhatcve2