CVE-2023-24892 Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability

...

CVE-2023-21720 Microsoft Edge (Chromium-based) Tampering Vulnerability

...

CVE-2023-24566

A vulnerability has been identified in Solid Edge SE2022 All versions V222.0MP12, Solid Edge SE2022 All versions, Solid Edge SE2023 All versions V223.0Update2. The affected application is vulnerable to stack-based buffer while parsing specially crafted PAR files. An attacker could leverage this...

CVE-2023-24564

A vulnerability has been identified in Solid Edge SE2022 All versions V222.0MP12, Solid Edge SE2022 All versions, Solid Edge SE2023 All versions V223.0Update2. The affected application contains a memory corruption vulnerability while parsing specially crafted DWG files. This could allow an attack...

CVE-2023-24561

A vulnerability has been identified in Solid Edge SE2022 All versions V222.0MP12, Solid Edge SE2023 All versions V223.0Update2. The affected application is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. An attacker could leverage this vulnerability to execut...

CVE-2023-24556

A vulnerability has been identified in Solid Edge SE2022 All versions V222.0MP12, Solid Edge SE2023 All versions V223.0Update2. The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted PAR files. This could allow an attacker to...

PT-2023-1364 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited by a remote attacker to execute arbitrary code. Recommendations: At the moment, there is no...

CVE-2023-21775

Microsoft Edge Chromium-based Remote Code Execution Vulnerability...

The vulnerability in the implementation of the CORS mechanism in Google Chrome and Microsoft Edge browsers allows a hacker to bypass security restrictions.

The vulnerability of the CORS mechanism implementation in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions through a specially created HTML page...

CVE-2022-46348

A vulnerability has been identified in Parasolid V33.1 All versions V33.1.264, Parasolid V34.0 All versions V34.0.252, Parasolid V34.1 All versions V34.1.242, Parasolid V35.0 All versions V35.0.170, Solid Edge SE2022 All versions V222.0MP12, Solid Edge SE2022 All versions, Solid Edge SE2023 All...

AVEVA Edge 安全漏洞

AVEVA Edge is a highly scalable and flexible HMI/SCADA software from AVEVA Software UK. A security vulnerability exists in AVEVA Edge 2020 R2 and prior versions that can be exploited by an attacker to potentially compromise the confidentiality, availability or integrity of the system. Details of...

PT-2022-5987 · Aveva · Aveva Edge

Name of the Vulnerable Software and Affected Versions: AVEVA Edge formerly InduSoft Web Studio versions R2020 and prior Description: The issue allows a client to provide a malicious connection string, potentially enabling an adversary to port scan the LAN based on the hosts' responses. This is...

The vulnerability of user tabs in Google Chrome and Microsoft Edge allows a hacker to bypass existing security restrictions and expose the protected information.

The vulnerability of user tabs in Google Chrome and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and disclose sensitive information through a specially created website...

The vulnerability of Google Chrome and Microsoft Edge browsers, related to insufficient validation of input data, allows attackers to disclose protected information.

The vulnerability of the File components in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information through a specially created web page...

The vulnerability of the Sign-In component in Google Chrome and Microsoft Edge browsers allows a hacker to elevate their privileges.

The vulnerability of the Sign-In component in Google Chrome and Microsoft Edge browsers relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created web page...

The vulnerability of the offline mode of Google Chrome and Microsoft Edge browsers, which allows a hacker to disclose protected information

The vulnerability of the offline mode of Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

Microsoft Edge’s vulnerability, related to insufficient validation of input data, allows attackers to execute arbitrary code with elevated privileges.

The vulnerability of Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code with elevated privileges...

Vulnerability fixed in Microsoft Edge

A vulnerability has been fixed in Microsoft Edge. A remote malicious person could potentially exploit the vulnerability to execute arbitrary code. Because it is possible to get out of Edge's sandbox environment, execution of code at the SYSTEM level cannot be ruled out. Abuse requires that the...

Microsoft Edge’s vulnerability, related to synchronization errors when using a shared resource, allows attackers to escalate their privileges.

The vulnerability of Microsoft Edge relates to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...

The vulnerability of the user learning components of Microsoft Edge and Google Chrome, which allows a hacker to execute arbitrary code.

The vulnerability of the user learning components of Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote location...