Exploit for Improper Input Validation in Microsoft

🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the...

Microsoft Edge Bug Could Have Allowed Attackers to Silently Install Malicious Extensions

A now-patched security flaw in the Microsoft Edge web browser could have been abused to install arbitrary extensions on users' systems and carry out malicious actions. "This flaw could have allowed an attacker to exploit a private API, initially intended for marketing purposes, to covertly instal...

CVE-2024-21388

Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...

CVE-2024-21388

Microsoft Edge (Chromium-based) is affected by CVE-2024-21388, a Privilege Escalation vulnerability tied to a private “marketing” API. The connected exploit repository describes a Python-based technique exploiting a private Edge API on privileged Microsoft domains to silently install extensions w...

KLA63619 PE vulnerability in Microsoft Browser

An elevation of privilege vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-21388 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Edge CVE list CVE-2024-21388 high KB...