CVE-2024-49041

Microsoft Edge Chromium-based Spoofing Vulnerability...

CVE-2024-49041

Microsoft Edge (Chromium-based) spoofing vulnerability CVE-2024-49041 affects Edge versions up to 131.0.2903.63 per PT-2024-9305; remediation is to upgrade to a fixed version per advisories. Exploitation status is not detailed in the provided documents.

CVE-2024-49041 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

Microsoft Edge (Chromium) < 131.0.2903.86 (CVE-2024-49041)

The version of Microsoft Edge installed on the remote Windows host is prior to 131.0.2903.86. It is, therefore, affected by a vulnerability as referenced in the December 5, 2024 advisory. - Microsoft Edge Chromium-based Spoofing Vulnerability CVE-2024-49041 Note that Nessus has not tested for thi...

Microsoft Edge (Chromium-Based) Spoofing Vulnerability - Nov24

Microsoft Edge Chromium-Based is prone to a spoofing vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Siemens Solid Edge 代码问题漏洞

Solid Edge is a portfolio of software tools that address a variety of product development processes: 3D design, simulation, manufacturing and design management. Siemens Solid Edge suffers from a DLL hijacking vulnerability that can be exploited by attackers to execute arbitrary code by placing a...

Command injection vulnerability in Trend Micro Cloud Edge

Overview Trend Micro Incorporated has released a security update for Cloud Edge to fix a command injection vulnerability CVE-2024-48904. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of the solution through JVN. Impact An arbitrary command may be executed on th...

Chromium: CVE -2024-10231 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Edge browser’s vulnerability, related to the absence of warnings for dangerous actions, allows attackers to carry out spear-phishing attacks.

The vulnerability of Microsoft Edge is related to the absence of warnings about dangerous actions. Exploiting this vulnerability allows a remote attacker to carry out spear-phishing attacks...

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability (CNVD-2024-41987)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge Chromium-based suffers from a remote code execution vulnerability that is caused by a type confusion flaw. An attacker could exploit the vulnerability to execute arbitrary...

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A remote code execution vulnerability exists in Microsoft Edge Chromium-based, which can be exploited by an attacker to execute arbitrary code on a system...

Trend Micro Cloud Edge REST API Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trend Micro Cloud Edge. Authentication is not required to exploit this vulnerability. The specific flaw exists within the REST API, which listens on TCP port 8443 by default. The issue results from t...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to disclose protected information.

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers relates to the use of memory after deallocation. Exploiting this vulnerability can allow a remote attacker to expose sensitive information through a specially created HTML page...

PT-2024-6484 · Google +4 · Skia +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 129.0.6668.70 Microsoft Edge affected versions not specified Description: The issue is related to an integer overflow in the Skia graphics library used by Google Chrome and Microsoft Edge browsers. This can be...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to the execution of operations outside of the buffer in memory, resulting from improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious act...

The vulnerability of user tabs in Google Chrome and Microsoft Edge allows a hacker to replace the user’s interface.

The vulnerability of user tabs in Google Chrome and Microsoft Edge is related to improper security checks for standard elements. Exploiting this vulnerability allows a malicious actor to replace the user interface with a specially crafted HTML page...

Microsoft Edge (HTML-based) Memory Corruption Vulnerability

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A memory corruption vulnerability exists in Microsoft Edge HTML-based, which can be exploited by an attacker to execute arbitrary code on a system...

The vulnerability of the Sharing component in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the Sharing component in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote location...

PT-2024-6550 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 128.0.6613.84 Microsoft Edge affected versions not specified Description: The issue is related to insufficient data validation in the installer, which can be exploited by a local attacker to perform privilege...

PT-2024-6810 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 129.0.6668.58 Microsoft Edge affected versions not specified Description: The issue is related to insufficient data validation in the Omnibox feature of Google Chrome and Microsoft Edge browsers. This could all...