CopperStealer Distributes Malicious Chromium-based Browser Extension to Steal Cryptocurrencies

We tracked the latest deployment of the group behind CopperStealer, this time stealing cryptocurrencies and users’ wallet account information via a malicious Chromium-based browser extension...

CVE-2022-35796

Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...

CVE-2022-35796

Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...

CVE-2022-33636

Microsoft Edge Chromium-based Remote Code Execution Vulnerability...

CVE-2022-33636

Microsoft Edge Chromium-based Remote Code Execution Vulnerability...

CVE-2022-33636

Microsoft Edge Chromium-based Remote Code Execution Vulnerability...

CVE-2022-33649

Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...

CVE-2022-33649

Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...

Remote code execution

Microsoft Edge Chromium-based Remote Code Execution Vulnerability...

Privilege escalation

Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...

Security feature bypass

Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...

CVE-2022-35796

Technical details for CVE-2022-35796 (Microsoft Edge Chromium-based elevation of privilege) are not publicly disclosed in the provided connected documents. Monitor for updates from official vulnerability feeds for affected versions, impact, and remediation information.

CVE-2022-35796 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

August 2022 Patch Tuesday | Microsoft Releases 121 Vulnerabilities with 17 Critical, plus 20 Microsoft Edge (Chromium-Based); Adobe Releases 5 Advisories, 25 Vulnerabilities with 15 Critical.

Microsoft Patch Tuesday Summary Microsoft has fixed 121 vulnerabilities aka flaws in the August 2022 update, including 17 vulnerabilities classified as Critical as they allow Elevation of Privilege EoP and Remote Code Execution RCE. This months Patch Tuesday fixes two 2 zero-day vulnerabilities,...

CVE-2022-33649

CVE-2022-33649 is a Microsoft Edge (Chromium-based) security feature bypass vulnerability. The NVD entry specifies a 3.1.1 CVSS: 3.1 base score 9.6 (CRITICAL) with network attack vector, no user privileges required, and user interaction needed. The overall impact is high on confidentiality, integ...

CVE-2022-33649 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

...

CVE-2022-33636

CVE-2022-33636 refers to a remote code execution vulnerability in Microsoft Edge (Chromium-based) . Connected documents corroborate the vulnerability is associated with Edge/Chromium and indicate a fix has been released by Microsoft. The Gentoo advisory GLSA-202208-35 lists CVE-2022-33636 among m...

CVE-2022-33636 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

PT-2022-4161 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited by a remote attacker to execute arbitrary code. Recommendations: At the moment, there is no...