KLA63137 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service.

Below is a complete list of vulnerabilities:

1. Out of bounds write vulnerability in V8 can be exploited to cause denial of service.
2. Type confusion vulnerability in V8 can be exploited to cause denial of service.
3. Out of bounds memory access vulnerability in V8 can be exploited to cause denial of service.

Original advisories

CVE-2024-0517

CVE-2024-0518

CVE-2024-0519

Exploitation

Public exploits exist for this vulnerability.

Related products

Microsoft-Edge

CVE list

CVE-2024-0517 critical

CVE-2024-0518 critical

CVE-2024-0519 critical

KB list

Solution

Install necessary updates from the Settings and more menu, that are listed in your About Microsoft Edge page (Microsoft Edge About page usually can be accessed from the Help and feedback option)

Microsoft Edge update settings

Impacts

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

• Microsoft Edge (Chromium-based)