Microsoft Edge (Chromium) < 127.0.2651.98 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 127.0.2651.98. It is, therefore, affected by multiple vulnerabilities as referenced in the August 8, 2024 advisory. - Out of bounds memory access in ANGLE in Google Chrome prior to 127.0.6533.99 allowed a remote attack...

PT-2024-5706 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to errors in data type mixing, which can allow an attacker to execute arbitrary code. This is a memory corruption vulnerability in Microsoft Edge based on HTML...

KLA71454 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Type confusion vulnerability in V8 can be exploited to cause denial of service. 2. A memo...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to gain full control over the application.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to improper security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain full control over the application through a specially...

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities - Aug24

Microsoft Edge Chromium-Based is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

ROS-20240807-09

A vulnerability in the V8 JavaScript script handler of the Google Chrome browser is related to an improperly implemented security checks for the standard. Exploitation of the vulnerability could allow an attacker, acting remotely, to perform a sandbox exit using a specially crafted HTML page A...

PT-2024-5755 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 127.0.6533.99 Microsoft Edge affected versions not specified Description: The issue is related to a use after free flaw in the Sharing component, which could allow a remote attacker to potentially exploit heap...

PT-2024-5747 · Google +4 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 127.0.6533.99 Microsoft Edge versions affected versions not specified Description: The issue is related to a type confusion error in the V8 JavaScript engine, which can lead to heap corruption. This can be...

PT-2024-5654 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 127.0.6533.99 Microsoft Edge affected versions not specified Description: The issue is related to a use after free in the WebAudio component, which could allow a remote attacker to potentially exploit heap...

PT-2024-5752 · Google +4 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 127.0.6533.99 Microsoft Edge affected versions not specified Description: The issue is related to an out-of-bounds memory access in the ANGLE library used by Google Chrome and Microsoft Edge. This could allow a...

PT-2024-7564 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 130.0.6723.58 Microsoft Edge affected versions not specified Description: The issue is related to a use after free in ParcelTracking, which can be exploited by a remote attacker who convinces a user to engage i...

Chromium: CVE-2024-7256 Insufficient data validation in Dawn

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2024-7255 Out of bounds read in WebTransport

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2024-6990 Uninitialized Use in Dawn

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

The vulnerability of the Safe Browsing service in Google Chrome and Microsoft Edge browsers allows a malicious actor to trigger a service failure.

The vulnerability of Google Chrome and Microsoft Edge browsers’ Safe Browsing service is related to insufficient validation of entered data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the FedCM component in browsers Google Chrome and Microsoft Edge allows a perpetrator to gain unauthorized access to its functional features.

The vulnerability of the FedCM component in browsers such as Google Chrome and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to the system’s functions...

The vulnerability of the DXE microprogramming software driver in the BIOS of the Dell Edge Gateway 3200 allows a hacker to execute arbitrary code and gain elevated privileges.

The vulnerability of the DXE microprogramming software driver for Dell Edge Gateway 3200 BIOS is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code and gain elevated privileges...

The vulnerability of the Canvas component in Google Chrome and Microsoft Edge browsers allows attackers to gain unauthorized access to limited functionality.

The vulnerability of the Canvas component in Google Chrome and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to limited functionality...

The vulnerability of the Safe Browsing service in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of Google Chrome and Microsoft Edge browsers’ Safe Browsing service is related to insufficient validation of entered data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of Google Chrome and Microsoft Edge browsers’ CSS components allows attackers to trigger a service failure or execute arbitrary code.

The vulnerability of Google Chrome and Microsoft Edge browsers’ CSS components is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure or execute arbitrary code...