CVE-2024-20709

Acrobat Reader T5 MSFT Edge versions 120.0.2210.91 and earlier are affected by an Improper Input Validation vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue...

SSO logon to Director fail via Edge/Chrome/Firefox

SSO logon to Director fail when accessing from outside of Director server computer via Edge/Chrome/Firefox. IE or IE mode works fine and any browser on Director server works fine User get "An internal error has occurred" error even if credential is manually input...

The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Scalefusion kiosk security vulnerability

ScaleFusion is a mobile device management and unified endpoint management application from ScaleFusion. A security vulnerability exists in the Scalefusion kiosk version 10.5.2, which stems from the ability to use Alt-F4, resulting in the inability to properly restrict users from using the Edge...

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. An elevation of privilege vulnerability exists in Microsoft Edge Chromium-based, which can be exploited by an attacker to gain elevated privileges on a system...

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows a hacker to compromise the rendering process.

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the rendering process through a specially crafted HTML page...

Microsoft's January 2024 Windows Update Patches 48 New Vulnerabilities

Microsoft has addressed a total of 48 security flaws spanning its software as part of its Patch Tuesday updates for January 2024. Of the 48 bugs, two are rated Critical and 46 are rated Important in severity. There is no evidence that any of the issues are publicly known or under active attack at...

Microsoft Edge browser’s vulnerability, related to insufficient protection of service data, allows attackers to gain unauthorized access to protected information.

The vulnerability of Microsoft Edge relates to insufficient protection of service data. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

CVE-2023-36880

Microsoft Edge Chromium-based Information Disclosure Vulnerability...

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

...

The vulnerability of the Libavif library for encoding and decoding .avif files allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information. This vulnerability is exploitable through attacks using Google Chrome and Microsoft Edge browsers.

The vulnerability of the Libavif library for encoding and decoding .avif files in Google Chrome and Microsoft Edge browsers is related to the use of memory after file processing for .avif formats. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, an...

PT-2023-8689 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: ScaleFusion version 10.5.2 Description: The issue is related to inadequate access control in the Scalefusion MDM Agent, allowing an attacker to open arbitrary websites. Specifically, a search can be made from a tooltip, which can be used to...

CVE-2023-36008

Microsoft Edge Chromium-based Remote Code Execution Vulnerability...

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

PT-2023-7190 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue exists due to insufficient input validation in the browser. Exploitation of this issue may allow an attacker to execute arbitrary code. Recommendations: At t...

CVE-2023-36027

Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...

CVE-2023-36024

Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...

PT-2023-7020 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to the browser's failure to properly enforce web page structure protections. This can allow a remote attacker to elevate their privileges...

CVE-2023-36029

Microsoft Edge Chromium-based Spoofing Vulnerability...

Microsoft Edge Security Breach

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge that stems from the presence of a remote code execution vulnerability...