Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA12349
HistoryNov 09, 2021 - 12:00 a.m.

KLA12349 Multiple vulnerabilities in Microsoft Browser

2021-11-0900:00:00
Kaspersky Lab
threats.kaspersky.com
32

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

61.5%

JSON

Detect date:

11/09/2021

Severity:

Critical

Description:

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code.

Affected products:

Microsoft Edge (Chromium-based) in IE Mode
ChakraCore

Solution:

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories:

CVE-2021-41351
CVE-2021-42279

Impacts:

ACE

Related products:

Microsoft Edge

KB list:

5007206
5007186
5007215
5007189

Microsoft official advisories:

Related

mscve 2
prion 2
cve 2
github 1
cnvd 1
osv 1
openvas 5
mskb 7
nessus 7
hivepro 1
qualysblog 1
thn 1
kaspersky 1
mscve
mscve
Microsoft Edge (Chrome based) Spoofing on IE Mode
2021-11-09 08:00:00
Chakra Scripting Engine Memory Corruption Vulnerability
2021-11-09 08:00:00
prion
prion
Code injection
2021-11-10 01:19:00
Memory corruption
2021-11-10 01:19:00
cve
cve
CVE-2021-41351
2021-11-10 01:19:00
CVE-2021-42279
2021-11-10 01:19:00
github
github
Chakra Scripting Engine and ChakraCore Vulnerable to Memory Corruption
2022-05-24 19:20:22
cnvd
cnvd
Microsoft Chakra Scripting Engine Memory Corruption Vulnerability
2021-11-12 00:00:00
osv
osv
Chakra Scripting Engine and ChakraCore Vulnerable to Memory Corruption
2022-05-24 19:20:22
openvas
openvas
Microsoft Windows Multiple Vulnerabilities (KB5007186)
2021-11-10 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5007189)
2021-11-10 00:00:00
Microsoft Windows Multiple Vulnerabilities (KB5007206)
2021-11-10 00:00:00
mskb
mskb
November 9, 2021—KB5007215 (OS Build 22000.318)
2021-11-09 08:00:00
November 9, 2021—KB5007189 (OS Build 18363.1916)
2021-11-09 08:00:00
November 9, 2021—KB5007186 (OS Builds 19041.1348, 19042.1348, and 19043.1348)
2021-11-09 08:00:00
nessus
nessus
KB5007215: Windows 11 Security Updates (November 2021)
2021-11-09 00:00:00
KB5007189: Windows 10 Version 1909 Security Update (November 2021)
2021-11-09 00:00:00
KB5007206: Windows 10 Version 1809 and Windows Server 2019 Security Update (November 2021)
2021-11-09 00:00:00
hivepro
hivepro
Microsoft’s Patch Tuesday Security Updates for November
2021-11-10 11:20:36
qualysblog
qualysblog
Microsoft & Adobe Patch Tuesday (November 2021) – Microsoft 55 Vulnerabilities with 6 Critical, 6 Zero-Days. Adobe 4 Vulnerabilities
2021-11-11 01:07:53
thn
thn
Microsoft Issues Patches for Actively Exploited Excel, Exchange Server 0-Day Bugs
2021-11-10 06:24:00
kaspersky
kaspersky
KLA12345 Multiple vulnerabilities in Microsoft Windows
2021-11-09 00:00:00

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

61.5%

JSON
Related for KLA12349
mscve2prion2cve2github1cnvd1osv1openvas5mskb7nessus7hivepro1qualysblog1thn1kaspersky1