The vulnerability of the 3D viewing tool JT JT2Go, the Product Lifecycle Management system Teamcenter Visualization, and the design and simulation tools set by Siemens Solid Edge allows a malicious actor to execute arbitrary code within the context of the current process.

The vulnerability of the 3D viewing tool JT JT2Go, the product lifecycle management system Teamcenter Visualization, and the design and simulation tools set by Siemens Solid Edge relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows an attacker t...

Microsoft Edge (Chromium) < 116.0.1938.69 (CVE-2023-4572)

The version of Microsoft Edge installed on the remote Windows host is prior to 116.0.1938.69. It is, therefore, affected by a vulnerability as referenced in the August 31, 2023 advisory. - Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker to...

Citrix PDF Printer does not open full screen with Edge as default PDF viewer

When users are using the HTML5 client and Citrix PDF Printer while using Edge as the default PDF viewer the print job is shown but there is a scroll bar on the right. If the user changes to Adobe as the default PDF viewer the print job displays correctly...

Citrix Profile Management user configuration for Microsoft Edge

Microsoft announced retirement of Internet Explorer in Summer 2022, MS Edge was deployed to Citrix XenApp servers with published desktops. When users log off and log on again the MS Edge presents "Out of box" dialog prompts. MS Edge favorites, homepage, history, etc.are not preserved. This articl...

CVE-2023-39136

An unhandled edge case in the component sanitizedPath of ZipArchive v2.5.4 allows attackers to cause a Denial of Service DoS via a crafted zip file...

PT-2023-26798 · Unknown · Ziparchive

Name of the Vulnerable Software and Affected Versions: ZipArchive version 2.5.4 Description: The issue is related to an unhandled edge case in the sanitizedPath component of ZipArchive, which allows attackers to cause a Denial of Service DoS by using a crafted zip file. Recommendations: For...

CVE-2023-39136

An unhandled edge case in the component sanitizedPath of ZipArchive v2.5.4 allows attackers to cause a Denial of Service DoS via a crafted zip file...

Microsoft Edge Elevation of Privilege Vulnerability (CNVD-2023-76760)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges on the system...

The vulnerability of Microsoft Edge browser (based on Chromium) relates to insufficient validation of input data, allowing attackers to escalate their privileges.

The vulnerability of Microsoft Edge based on Chromium is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

CVE-2023-36741

Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...

CVE-2023-36741

Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...

Privilege escalation

Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...

CVE-2023-36741 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

CVE-2023-36741 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

CVE-2023-36741

CVE-2023-36741 refers to a Microsoft Edge (Chromium-based) elevation of privilege vulnerability. The initial document identifies the vulnerability as Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability with a high-severity CVSS score (base 7.5/8.3 in the NVD/Microsoft CVSS vector...

Microsoft Edge (Chromium) < 116.0.1938.62 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 116.0.1938.62. It is, therefore, affected by multiple vulnerabilities as referenced in the August 25, 2023 advisory. - Microsoft Edge Chromium-based Elevation of Privilege Vulnerability CVE-2023-36741 - Out of bounds...

CVE-2023-39290

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through R19.3 SP3 22.24.5800.0 could allow an authenticated attacker with elevated privileges to conduct an information disclosure attack due to improper configuration. A successful exploit could allow an attacker to view syst...

CVE-2023-39290

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through R19.3 SP3 22.24.5800.0 could allow an authenticated attacker with elevated privileges to conduct an information disclosure attack due to improper configuration. A successful exploit could allow an attacker to view syst...

CVE-2023-39290

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through R19.3 SP3 22.24.5800.0 could allow an authenticated attacker with elevated privileges to conduct an information disclosure attack due to improper configuration. A successful exploit could allow an attacker to view syst...

CVE-2023-39287

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through 19.3 SP3 22.24.5800.0 could allow an authenticated attacker with elevated privileges and internal network access to conduct a command argument injection due to insufficient parameter sanitization. A successful exploit...