Chromium: CVE-2023-6351 Use after free in libavif

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2023-6350 Out of bounds memory access in libavif

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2023-6348 Type Confusion in Spellcheck

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2023-6347 Use after free in Mojo

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2023-6346 Use after free in WebAudio

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2023-6345 Integer overflow in Skia

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2023-6345 exists in the wild...

Zero-Day Alert: Google Chrome Under Active Attack, Exploiting New Vulnerability

Google has rolled out security updates to fix seven security issues in its Chrome browser, including a zero-day that has come under active exploitation in the wild. Tracked as CVE-2023-6345, the high-severity vulnerability has been described as an integer overflow bug in Skia, an open source 2D...

The vulnerability in the web-based interface for controlling WAGO PFC100/PFC200 programmable logic controllers, Edge Controllers, and WAGO Touch Panel 600 sensor panels allows a perpetrator to gain increased privileges.

The vulnerability of the web-based interface for controlling WAGO PFC100/PFC200 programmable logic controllers, Edge Controllers, and WAGO Touch Panel 600 sensors is related to errors in privilege management during control operations. Exploiting this vulnerability can allow attackers to gain...

KLA62208 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Type confusion vulnerability in Spellcheck can be exploited to cause denial of service. 2...

Microsoft Edge (Chromium) < 118.0.2088.122 / 119.0.2151.97 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 118.0.2088.122 / 119.0.2151.97. It is, therefore, affected by multiple vulnerabilities as referenced in the November 29, 2023 advisory. - Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remo...

The vulnerability in Microsoft Edge browsers arises due to insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Edge exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of Microsoft Edge browser, related to information representation errors in the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spear-phishing attacks...

Microsoft Edge (Chromium-Based) Remote Code Execution And Elevation of Privilege Vulnerabilities (Nov 2023)

This host is missing an important security update according to Microsoft Edge Chromium-Based updates. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Nov 2023)

This host is missing an important security update according to Microsoft Edge Chromium-Based updates. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

The vulnerability of the Navigation component in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the Navigation component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote location...

The vulnerability of the Garbage Collector component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the Garbage Collector component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is released. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...

Microsoft Edge browser’s vulnerability, related to the lack of protection for website structure, allows attackers to enhance their privileges.

The vulnerability of Microsoft Edge relates to the lack of measures taken to protect the structure of a web page. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

PT-2023-8537 · Siemens · Solid Edge

Name of the Vulnerable Software and Affected Versions: Solid Edge SE2023 versions prior to V223.0 Update 10 Description: A vulnerability has been identified in the affected application, which is vulnerable to uninitialized pointer access while parsing specially crafted PAR files. This could allow...

UPM - Microsoft Edge browser does not retain saved credentials in subsequent logins

With Citrix User Profile Management UPM configuration Microsoft Edge browser does not retain saved credentials in subsequent login to VDI...

Microsoft Edge browser’s vulnerability, related to the lack of protection for website structure, allows attackers to enhance their privileges.

The vulnerability of Microsoft Edge relates to the lack of measures taken to protect the structure of a web page. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...