CVE-2024-31498

Yubico ykman-gui aka YubiKey Manager GUI before 1.2.6 on Windows, when Edge is not used, allows privilege escalation because browser windows can open as Administrator...

CVE-2024-29981

Microsoft Edge Chromium-based Spoofing Vulnerability...

CVE-2024-29981

Microsoft Edge Chromium-based Spoofing Vulnerability...

CVE-2024-29049

Microsoft Edge Chromium-based Webview2 Spoofing Vulnerability...

CVE-2024-29049

Microsoft Edge Chromium-based Webview2 Spoofing Vulnerability...

CVE-2024-29049

CVE-2024-29049 describes a spoofing vulnerability in Microsoft Edge (Chromium-based) that involves the Edge WebView2 component. Connected sources consistently identify the affected element as the WebView2 surface used by Edge’s Chromium-based browser, resulting in spoofing of the user interface. ...

CVE-2024-29049 Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability

...

CVE-2024-29049 Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability

...

CVE-2024-29981 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2024-29981 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2024-29981

CVE-2024-29981 affects Microsoft Edge (Chromium-based). The vulnerability is a spoofing flaw in the browser’s UI surface that could enable spoofed user interfaces. CVSS 3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N, base score 4.3 (Medium); exploitation requires user interaction and the attack vector i...

CVE-2024-30255

Envoy's HTTP/2 implementation is vulnerable to CPU exhaustion from a flood of CONTINUATION frames in versions prior to 1.29.3, 1.28.2, 1.27.4, and 1.26.8. The vulnerability lets an attacker send unlimited CONTINUATION frames without END_HEADERS, causing high CPU usage and potential denial of serv...

Chromium: CVE-2024-3159 Out of bounds memory access in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2024-3158 Use after free in Bookmarks

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2024-3156 Inappropriate implementation in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability

...

Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

KLA65472 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. Out of bounds memory access vulnerability in V8 can be exploited to...

Microsoft Edge (Chromium) < 122.0.2365.120 / 123.0.2420.81 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 122.0.2365.120 / 123.0.2420.81. It is, therefore, affected by multiple vulnerabilities as referenced in the April 4, 2024 advisory. - Microsoft Edge Chromium-based Webview2 Spoofing Vulnerability CVE-2024-29049 -...

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A spoofing vulnerability exists in Microsoft Edge Chromium-based Webview2, which can be exploited by attackers to conduct spoofing attacks...