39 matches found
EUVD-2023-26990
Malicious code in bioql PyPI...
EUVD-2023-28882
Malicious code in bioql PyPI...
EUVD-2024-26096
Malicious code in bioql PyPI...
Hackers Exploit Webview2 to Deploy CoinLurker Malware and Evade Security Detection
Bogus software update lures are being used by threat actors to deliver a new stealer malware called CoinLurker. "Written in Go, CoinLurker employs cutting-edge obfuscation and anti-analysis techniques, making it a highly effective tool in modern cyber attacks," Morphisec researcher Nadav Lorber...
PVS 2402 | Console Setup: EdgeWebView2 not installing correctly
When launching the "Console Installer" it tries to install the prerequired software which includes Edge WebView2. In some cases when installing it from the iso, Edge WebView2 might not show up in "appwiz.cpl" or "Apps and Features". If you start the "Console Installer" again it is shown as "not...
The vulnerability of the Webview2 control in the Microsoft Edge browser allows attackers to perform spoofing attacks.
The vulnerability of the Webview2 control in Microsoft Edge exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks...
Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A spoofing vulnerability exists in Microsoft Edge Chromium-based Webview2, which can be exploited by attackers to conduct spoofing attacks...
Microsoft Edge (Chromium-Based) Multiple Vulnerabilities - Apr24
Microsoft Edge Chromium-Based is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2024-29049
Microsoft Edge Chromium-based Webview2 Spoofing Vulnerability...
CVE-2024-29049
Microsoft Edge Chromium-based Webview2 Spoofing Vulnerability...
CVE-2024-29049 Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability
...
CVE-2024-29049
CVE-2024-29049 describes a spoofing vulnerability in Microsoft Edge (Chromium-based) that involves the Edge WebView2 component. Connected sources consistently identify the affected element as the WebView2 surface used by Edge’s Chromium-based browser, resulting in spoofing of the user interface. ...
Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability
...
Microsoft Edge 安全漏洞
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A spoofing vulnerability exists in Microsoft Edge Chromium-based Webview2, which can be exploited by attackers to conduct spoofing attacks...
Microsoft Edge (Chromium) < 122.0.2365.120 / 123.0.2420.81 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 122.0.2365.120 / 123.0.2420.81. It is, therefore, affected by multiple vulnerabilities as referenced in the April 4, 2024 advisory. - Microsoft Edge Chromium-based Webview2 Spoofing Vulnerability CVE-2024-29049 -...
Zoom Client for Meetings < 5.13.3 Vulnerability (ZSB-23001)
The version of Zoom Client for Meetings installed on the remote host is prior to 5.13.3. It is, therefore, affected by a vulnerability as referenced in the ZSB-23001 advisory. - Zoom for Windows clients before version 5.13.3, Zoom Rooms for Windows clients before version 5.13.5 and Zoom VDI for...
Beware: New DoubleFinger Loader Targets Cryptocurrency Wallets with Stealer
A novel multi-stage loader called DoubleFinger has been observed delivering a cryptocurrency stealer dubbed GreetingGhoul in what's an advanced attack targeting users in Europe, the U.S., and Latin America. "DoubleFinger is deployed on the target machine, when the victim opens a malicious PIF...
Zoom VDI Meeting Client < 5.13.1 Vulnerability (ZSB-23001)
The version of Zoom Client for Meetings installed on the remote host is prior to 5.13.3., or the version of Zoom VDI isntalled on the remote host is prior to 5.13.1. It is, therefore, affected by a the Information Disclosure vulnerability as referenced in the ZSB-23001 advisory. - Zoom for Window...
Microsoft Edge (Chromium-based) Webview2 1.0.1661.34 - Spoofing Vulnerability
Title: Microsoft-Edge-Chromium-based-Webview2-1.0.1661.34-Spoofing-Vulnerability Author: nu11secur1ty Date: 04.10.2023 Vendor: https://developer.microsoft.com/en-us/ Software: https://developer.microsoft.com/en-us/microsoft-edge/webview2/ Reference:...
Microsoft Edge (Chromium-based) Webview2 1.0.1661.34 - Spoofing
Title: Microsoft-Edge-Chromium-based-Webview2-1.0.1661.34-Spoofing-Vulnerability Author: nu11secur1ty Date: 04.10.2023 Vendor: https://developer.microsoft.com/en-us/ Software: https://developer.microsoft.com/en-us/microsoft-edge/webview2/ Reference:...