Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA49268
HistoryMay 18, 2023 - 12:00 a.m.

KLA49268 Multiple vulnerabilities in Microsoft Browser

2023-05-1800:00:00
Kaspersky Lab
threats.kaspersky.com
10
microsoft edge
chromium-based
arbitrary code execution
denial of service
malware
exploit
vulnerabilities
security update
cve-2023-2724
cve-2023-2726
cve-2023-2723
critical
ace.

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0 Low

EPSS

Percentile

55.0%

JSON

Detect date:

05/18/2023

Severity:

Critical

Description:

Multiple vulnerabilities were found in Microsoft Edge. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service.

Exploitation:

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Affected products:

Microsoft Edge (Chromium-based)
Microsoft Edge (Chromium-based) Extended Stable

Solution:

Install necessary updates from the Settings and more menu, that are listed in your About Microsoft Edge page (Microsoft Edge About page usually can be accessed from the Help and feedback option)
Microsoft Edge update settings

Original advisories:

CVE-2023-2725
CVE-2023-2726
CVE-2023-2724
CVE-2023-2722
CVE-2023-2721
CVE-2023-2723

Impacts:

ACE

Related products:

Microsoft Edge

CVE-IDS:

CVE-2023-27248.8Critical
CVE-2023-27268.8Critical
CVE-2023-27238.8Critical
CVE-2023-27218.8Critical
CVE-2023-27228.8Critical
CVE-2023-27258.8Critical

Microsoft official advisories:

References

Related

nessus 13
kaspersky 2
openvas 9
freebsd 3
osv 1
debian 1
chrome 1
fedora 2
mscve 6
cve 6
cvelist 6
debiancve 6
prion 6
veracode 6
cnvd 6
ubuntucve 6
packetstorm 1
alpinelinux 1
gentoo 2
nessus
nessus
Google Chrome < 113.0.5672.126 Multiple Vulnerabilities
2023-05-16 00:00:00
Microsoft Edge (Chromium) < 113.0.1774.50 / 112.0.1722.84 Multiple Vulnerabilities
2023-05-23 00:00:00
Google Chrome < 113.0.5672.126 Multiple Vulnerabilities
2023-05-16 00:00:00
kaspersky
kaspersky
KLA49223 Multiple vulnerabilities in Google Chrome
2023-05-16 00:00:00
KLA49267 Multiple vulnerabilities in Opera
2023-05-18 00:00:00
openvas
openvas
Google Chrome Security Updates (stable-channel-update-for-desktop_16-2023-05) - Windows
2023-05-24 00:00:00
Debian: Security Advisory (DSA-5404-1)
2023-05-18 00:00:00
Google Chrome Security Updates (stable-channel-update-for-desktop_16-2023-05) - Mac OS X
2023-05-24 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2023-05-16 00:00:00
electron22 -- multiple vulnerabilities
2023-06-14 00:00:00
electron23 -- multiple vulnerabilities
2023-06-14 00:00:00
osv
osv
chromium - security update
2023-05-17 00:00:00
debian
debian
[SECURITY] [DSA 5404-1] chromium security update
2023-05-17 20:42:59
chrome
chrome
Stable Channel Update for Desktop
2023-05-16 00:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: chromium-113.0.5672.126-1.fc37
2023-05-22 00:39:06
[SECURITY] Fedora 38 Update: chromium-113.0.5672.126-1.fc38
2023-05-22 01:38:55
mscve
mscve
Chromium: CVE-2023-2726 Inappropriate implementation in WebApp Installs
2023-05-18 20:38:53
Chromium: CVE-2023-2724 Type Confusion in V8
2023-05-18 20:38:47
Chromium: CVE-2023-2721 Use after free in Navigation
2023-05-18 20:38:36
cve
cve
CVE-2023-2722
2023-05-16 19:15:09
CVE-2023-2726
2023-05-16 19:15:09
CVE-2023-2724
2023-05-16 19:15:09
cvelist
cvelist
CVE-2023-2722
2023-05-16 18:45:33
CVE-2023-2721
2023-05-16 18:45:33
CVE-2023-2724
2023-05-16 18:45:34
debiancve
debiancve
CVE-2023-2726
2023-05-16 19:15:09
CVE-2023-2724
2023-05-16 19:15:09
CVE-2023-2723
2023-05-16 19:15:09
prion
prion
Design/Logic Flaw
2023-05-16 19:15:00
Design/Logic Flaw
2023-05-16 19:15:00
Type confusion
2023-05-16 19:15:00
veracode
veracode
Type Confusion
2023-08-07 00:36:32
Use After Free
2023-08-07 00:36:35
Use-After-Free
2023-07-09 11:55:18
cnvd
cnvd
Google Chrome Type Obfuscation Vulnerability (CNVD-2023-43877)
2023-05-18 00:00:00
Google Chrome DevTools memory misreference vulnerability (CNVD-2023-43874)
2023-05-18 00:00:00
Google Chrome Code Execution Vulnerability (CNVD-2023-46125)
2023-05-18 00:00:00
ubuntucve
ubuntucve
CVE-2023-2726
2023-05-16 00:00:00
CVE-2023-2723
2023-05-16 00:00:00
CVE-2023-2722
2023-05-16 00:00:00
packetstorm
packetstorm
Chrome Internal JavaScript Object Access Via Origin Trials
2023-06-27 00:00:00
alpinelinux
alpinelinux
CVE-2023-2721
2023-05-16 19:15:09
gentoo
gentoo
Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities
2023-09-30 00:00:00
QtWebEngine: Multiple Vulnerabilities
2023-11-25 00:00:00

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.4 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0 Low

EPSS

Percentile

55.0%

JSON
Related for KLA49268
nessus13kaspersky2openvas9freebsd3osv1debian1chrome1fedora2mscve6cve6cvelist6debiancve6prion6veracode6cnvd6ubuntucve6packetstorm1alpinelinux1gentoo2