Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

DEBIAN-CVE-2023-2941

Inappropriate implementation in Extensions API in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to spoof the contents of the UI via a crafted Chrome Extension. Chromium security severity: Low...

Chromium: CVE-2023-2721 Use after free in Navigation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

KLA49268 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Edge. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Guest View can be exploited to cause denial of service or...

CopperStealer Malware Crew Resurfaces with New Rootkit and Phishing Kit Modules

The threat actors behind the CopperStealer malware resurfaced with two new campaigns in March and April 2023 that are designed to deliver two novel payloads dubbed CopperStealth and CopperPhish. Trend Micro is tracking the financially motivated group under the name Water Orthrus. The adversary is...

Microsoft's May Patch Tuesday Fixes 38 Flaws, Including 2 Exploited Zero-Day Bugs

Microsoft has rolled out Patch Tuesday updates for May 2023 to address 38 security flaws, including two zero-day bugs that it said are being actively exploited in the wild. Trend Micro's Zero Day Initiative ZDI said the volume is the lowest since August 2021, although it pointed out that "this...

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (May 2023)

This host is missing an important security update according to Microsoft Edge Chromium-Based updates. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2023-29350

Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...

CVE-2023-29350

Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...

CVE-2023-29354

Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...

CVE-2023-29354

Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...

Privilege escalation

Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...

Security feature bypass

Microsoft Edge Chromium-based Security Feature Bypass Vulnerability...

CVE-2023-29354 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

...

CVE-2023-29354

CVE-2023-29354 is a Microsoft Edge (Chromium-based) security feature bypass vulnerability. The CVSS v3.1 base score is 4.7 (Medium) with vectors: AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N, indicating network access with low attack complexity, no privileges, user interaction required, and potential impa...

CVE-2023-29354 Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

...

CVE-2023-29350 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

CVE-2023-29350 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

Chromium: CVE-2023-2460 Insufficient validation of untrusted input in Extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

KLA49158 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of vulnerabilities: 1. A security feature...