Edge Security Vulnerabilities

CVE-2023-39183

A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PSM files. This could allow an attacker to execute code in the context of the....

CVE-2023-39181

A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted PAR file. This could allow an attacker to execute code in the context of the.....

CVE-2023-39182

A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted DFT files. This could allow an attacker to execute code in the context of the....

CVE-2023-28830

A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Solid Edge SE2022 (All versions < V222.0 Update 13), Solid Edge SE2023 (All versions < V223.0 Update 4), Teamcenter Visualization V13.2 (All versions < V13.2.0.15), Teamcenter Visualization V13.3 (All versions <...

CVE-2023-38157

Microsoft Edge (Chromium-based) Security Feature Bypass...

CVE-2023-38418

The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process. Note: Software versions which have reached End of Technical Support (EoTS) are not...

CVE-2023-36858

An insufficient verification of data vulnerability exists in BIG-IP Edge Client for Windows and macOS that may allow an attacker to modify its configured server list. Note: Software versions which have reached End of Technical Support (EoTS) are not...

CVE-2023-35392

Microsoft Edge (Chromium-based) Spoofing...

CVE-2023-38173

Microsoft Edge for Android Spoofing...

CVE-2023-38187

Microsoft Edge (Chromium-based) Elevation of Privilege...

CVE-2023-36883

Microsoft Edge for iOS Spoofing...

CVE-2023-36887

Microsoft Edge (Chromium-based) Remote Code Execution...

CVE-2023-36888

Microsoft Edge for Android (Chromium-based) Tampering...

CVE-2023-3127

An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator...

CVE-2021-31982

Microsoft Edge (Chromium-based) Security Feature Bypass...

CVE-2021-34506

Microsoft Edge (Chromium-based) Security Feature Bypass...

CVE-2021-34475

Microsoft Edge (Chromium-based) Elevation of Privilege...

CVE-2021-42307

Microsoft Edge (Chromium-based) Information Disclosure...

CVE-2022-23264

Microsoft Edge (Chromium-based) Spoofing...

CVE-2022-26899

Microsoft Edge (Chromium-based) Elevation of Privilege...

CVE-2022-29147

Microsoft Edge (Chromium-based) Spoofing...

CVE-2022-29146

Microsoft Edge (Chromium-based) Elevation of Privilege...

CVE-2022-29144

Microsoft Edge (Chromium-based) Elevation of Privilege...

CVE-2021-31937

Microsoft Edge (Chromium-based) Elevation of Privilege...

CVE-2023-33145

Microsoft Edge (Chromium-based) Information Disclosure...

CVE-2023-29345

Microsoft Edge (Chromium-based) Security Feature Bypass...

CVE-2023-33143

Microsoft Edge (Chromium-based) Elevation of Privilege...

CVE-2022-47391

In multiple CODESYS products in multiple versions an unauthorized, remote attacker may use a improper input validation vulnerability to read from invalid addresses leading to a denial of...

CVE-2023-1698

In multiple products of WAGO a vulnerability allows an unauthenticated, remote attacker to create new users and change the device configuration which can result in unintended behaviour, Denial of Service and full system...

CVE-2023-30986

A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versions < V223.0 Update 2). Affected applications contain a memory corruption vulnerability while parsing specially crafted STP files. This could allow an attacker to execute cod...

CVE-2023-30985

A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versions < V223.0 Update 2). Affected applications contain an out of bounds read past the end of an allocated buffer while parsing a specially crafted OBJ file. This vulnerability...

CVE-2023-29350

Microsoft Edge (Chromium-based) Elevation of Privilege...

CVE-2023-29354

Microsoft Edge (Chromium-based) Security Feature Bypass...

CVE-2023-24461

An improper certificate validation vulnerability exists in the BIG-IP Edge Client for Windows and macOS and may allow an attacker to impersonate a BIG-IP APM system. Note: Software versions which have reached End of Technical Support (EoTS) are not...

CVE-2023-22372

In the pre connection stage, an improper enforcement of message integrity vulnerability exists in BIG-IP Edge Client for Windows and Mac OS. Note: Software versions which have reached End of Technical Support (EoTS) are not...

CVE-2023-29334

Microsoft Edge (Chromium-based) Spoofing...

CVE-2023-28261

Microsoft Edge (Chromium-based) Elevation of Privilege...

CVE-2023-28286

Microsoft Edge (Chromium-based) Security Feature Bypass...

CVE-2023-28301

Microsoft Edge (Chromium-based) Tampering...

CVE-2023-28284

Microsoft Edge (Chromium-based) Security Feature Bypass...

CVE-2023-24935

Microsoft Edge (Chromium-based) Spoofing...

CVE-2022-28687

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000). User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw.....

CVE-2022-28688

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000). User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw.....

CVE-2022-36969

This vulnerability allows remote attackers to disclose sensitive information on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000). User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The...

CVE-2022-36970

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 20.0 Build: 4201.2111.1802.0000 Service Pack 2. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The...

CVE-2022-28685

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000). User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw.....

CVE-2022-28686

This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802.0000). User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw.....

CVE-2023-24892

Microsoft Edge (Chromium-based) Webview2 Spoofing...

CVE-2022-45138

The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. The vulnerability allows an unauthenticated attacker to read and set several device parameters that can lead to full compromise of the...

CVE-2022-45137

The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser. This leads to a limited impact of confidentiality and integrity but no impact of...