Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA49377
HistoryJun 02, 2023 - 12:00 a.m.

KLA49377 Multiple vulnerabilities in Microsoft Browser

2023-06-0200:00:00
Kaspersky Lab
threats.kaspersky.com
15

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0 Low

EPSS

Percentile

60.0%

JSON

Detect date:

06/02/2023

Severity:

High

Description:

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions, spoof user interface, gain privileges.

Exploitation:

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Affected products:

Microsoft Edge (Chromium-based)

Solution:

Install necessary updates from the Settings and more menu, that are listed in your About Microsoft Edge page (Microsoft Edge About page usually can be accessed from the Help and feedback option)
Microsoft Edge update settings

Original advisories:

CVE-2023-29345
CVE-2023-2941
CVE-2023-2940
CVE-2023-2938
CVE-2023-33143
CVE-2023-2937
CVE-2023-2932
CVE-2023-2929
CVE-2023-2934
CVE-2023-2936
CVE-2023-2935
CVE-2023-2930
CVE-2023-2931
CVE-2023-2933
CVE-2023-2939

Impacts:

ACE

Related products:

Microsoft Edge

CVE-IDS:

CVE-2023-29298.8Critical
CVE-2023-29414.3Warning
CVE-2023-29374.3Warning
CVE-2023-29328.8Critical
CVE-2023-29406.5High
CVE-2023-29358.8Critical
CVE-2023-29308.8Critical
CVE-2023-29397.8Critical
CVE-2023-29348.8Critical
CVE-2023-29384.3Warning
CVE-2023-29338.8Critical
CVE-2023-29368.8Critical
CVE-2023-29318.8Critical
CVE-2023-293456.1High
CVE-2023-331437.5Critical

Microsoft official advisories:

References

Related

nessus 15
openvas 8
freebsd 4
debian 1
kaspersky 1
osv 1
chrome 1
cve 15
mscve 15
prion 15
cnvd 14
cvelist 15
alpinelinux 5
debiancve 13
veracode 13
ubuntucve 13
packetstorm 2
rapid7blog 1
gentoo 3
ics 1
fedora 2
redos 1
nessus
nessus
Microsoft Edge (Chromium) < 114.0.1823.37 Multiple Vulnerabilities
2023-06-07 00:00:00
FreeBSD : chromium -- multiple vulnerabilities (fd87a250-ff78-11ed-8290-a8a1599412c6)
2023-05-31 00:00:00
Google Chrome < 114.0.5735.90 Multiple Vulnerabilities
2023-05-30 00:00:00
openvas
openvas
Microsoft Edge (Chromium-Based) Multiple Vulnerabilities-01 (Jun 2023)
2023-06-15 00:00:00
Google Chrome Security Updates (stable-channel-update-for-desktop_30-2023-05) - Linux
2023-06-01 00:00:00
Google Chrome Security Update (stable-channel-update-for-desktop_30-2023-05) - Windows
2023-06-01 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2023-05-30 00:00:00
electron24 -- multiple vulnerabilities
2023-06-14 00:00:00
electron23 -- multiple vulnerabilities
2023-06-14 00:00:00
debian
debian
[SECURITY] [DSA 5418-1] chromium security update
2023-06-03 14:12:04
kaspersky
kaspersky
KLA49331 Multiple vulnerabilities in Google Chrome
2023-05-30 00:00:00
osv
osv
chromium - security update
2023-06-03 00:00:00
chrome
chrome
Stable Channel Update for Desktop
2023-05-30 00:00:00
cve
cve
CVE-2023-33143
2023-06-03 01:15:36
CVE-2023-29345
2023-06-07 18:15:09
CVE-2023-2936
2023-05-30 22:15:10
mscve
mscve
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
2023-06-02 07:00:00
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
2023-06-02 07:00:00
Chromium: CVE-2023-2941 Inappropriate implementation in Extensions API
2023-06-02 07:00:00
prion
prion
Privilege escalation
2023-06-03 01:15:00
Security feature bypass
2023-06-07 18:15:00
Input validation
2023-05-30 22:15:00
cnvd
cnvd
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
2023-06-06 00:00:00
Google Chrome Security Bypass Vulnerability (CNVD-2023-46111)
2023-05-31 00:00:00
Google Chrome V8 Component Code Execution Vulnerability
2023-05-31 00:00:00
cvelist
cvelist
CVE-2023-33143 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
2023-06-03 00:36:57
CVE-2023-29345 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
2023-06-07 17:48:14
CVE-2023-2932
2023-05-30 21:31:39
alpinelinux
alpinelinux
CVE-2023-2932
2023-05-30 22:15:10
CVE-2023-2935
2023-05-30 22:15:10
CVE-2023-2931
2023-05-30 22:15:10
debiancve
debiancve
CVE-2023-2935
2023-05-30 22:15:10
CVE-2023-2936
2023-05-30 22:15:10
CVE-2023-2932
2023-05-30 22:15:10
veracode
veracode
Type Confusion
2023-07-10 12:08:32
Authorization Bypass
2023-08-07 01:17:57
Use-After-Free
2023-07-10 12:08:25
ubuntucve
ubuntucve
CVE-2023-2936
2023-05-30 00:00:00
CVE-2023-2932
2023-05-30 00:00:00
CVE-2023-2941
2023-05-30 00:00:00
packetstorm
packetstorm
Chrome V8 Type Confusion
2023-06-30 00:00:00
Chrome v8::internal::Object::SetPropertyWithAccessor Type Confusion
2023-06-30 00:00:00
rapid7blog
rapid7blog
Patch Tuesday - June 2023
2023-06-13 20:49:27
gentoo
gentoo
Microsoft Edge: Multiple Vulnerabilities
2024-02-03 00:00:00
QtWebEngine: Multiple Vulnerabilities
2023-11-25 00:00:00
Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities
2024-01-31 00:00:00
ics
ics
Siemens COMOS
2023-11-16 12:00:00
fedora
fedora
[SECURITY] Fedora 37 Update: chromium-115.0.5790.110-1.fc37
2023-08-04 01:30:07
[SECURITY] Fedora 38 Update: chromium-115.0.5790.110-1.fc38
2023-08-10 00:42:33
redos
redos
ROS-20240328-08
2024-03-28 00:00:00

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

Low

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0 Low

EPSS

Percentile

60.0%

JSON
Related for KLA49377
nessus15openvas8freebsd4debian1kaspersky1osv1chrome1cve15mscve15prion15cnvd14cvelist15alpinelinux5debiancve13veracode13ubuntucve13packetstorm2rapid7blog1gentoo3ics1fedora2redos1