CVE-2024-33489

A vulnerability has been identified in Solid Edge All versions V224.0 Update 5. The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process...

CVE-2024-33493

A vulnerability has been identified in Solid Edge All versions V224.0 Update 5. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current...

Microsoft Edge ms-its: Scheme Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file while in Internet Explorer mode. The specific flaw...

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge allows a hacker to bypass existing security restrictions and perform a substitution of the user interface.

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge relates to bypassing authentication through spoofing. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions and replace the user interface with a specially created HTML...

The vulnerability of the privacy protection function of Fenced Frames in Google Chrome and Microsoft Edge allows attackers to gain unauthorized access to protected information.

The vulnerability of the Privacy-Fenced Frames function in Google Chrome and Microsoft Edge exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially...

Microsoft Edge (Chromium) < 132.0.2957.127 (CVE-2025-21262)

The version of Microsoft Edge installed on the remote Windows host is prior to 132.0.2957.127. It is, therefore, affected by a vulnerability as referenced in the January 24, 2025 advisory. - Microsoft Edge Chromium-based Spoofing Vulnerability CVE-2025-21262 Note that Nessus has not tested for th...

CVE-2025-21262

User Interface UI Misrepresentation of Critical Information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-21262 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

Microsoft Edge (Chromium-based) Spoofing Vulnerability

User Interface UI Misrepresentation of Critical Information in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

CVE-2025-21185

Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...

CVE-2024-13026

A vulnerability exists in Algo Edge up to 2.1.1 - a previously used legacy component of navify® Algorithm Suite. The vulnerability impacts the authentication mechanism of this component and could allow an attacker with adjacent access to the laboratory network and the Algo Edge system to craft...

CVE-2025-21185

Microsoft Edge (Chromium-based) has a CVE-2025-21185 Elevation of Privilege vulnerability (CVSS v3.1 base score 6.5; vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N). Affects Edge components as described in the entry; impact is limited to confidentiality exposure (C:H) with no integrity or a...

PT-2025-1298 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to inadequate access control in Microsoft Edge, allowing a remote attacker to potentially elevate their privileges. Recommendations: At the moment, there is no...

PT-2025-1285 · Microsoft +5 · Edge +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 132.0.6834.83 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in Compositing, allowing a remote attacker to perform UI spoofing via a crafted...

The vulnerability of the JavaScript script handler in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge relates to type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page from a remote location...

PT-2025-41495

Name of the Vulnerable Software and Affected Versions Chromium versions prior to 141.0.7390.65 Microsoft Edge versions prior to 141.0.7390.65 Description A use-after-free issue exists in the Storage component of Google Chrome and Microsoft Edge browsers. Exploitation of this issue could allow a...

PT-2024-10393 · Microsoft +5 · Edge +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 132.0.6834.159 Microsoft Edge versions prior to 132.0.2957.140 Description: The issue is related to a use-after-free vulnerability in the DevTools of Google Chrome and Microsoft Edge, which could allow a remote...

PT-2024-10288 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue concerns an elevation of privilege vulnerability in Microsoft Edge. This vulnerability may allow an attacker to elevate their privileges, potentially leading...

Microsoft Edge File Extension Spoofing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Microsoft...

CVE-2024-54094

A vulnerability has been identified in Solid Edge SE2024 All versions V224.0 Update 5. The affected application is vulnerable to heap-based buffer overflow while parsing specially crafted PAR files. This could allow an attacker to execute code in the context of the current process...