1856 matches found
PT-2024-3564 · Microsoft · Edge
Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based versions prior to 124.0.2478.97 Description: The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to conduct spoofing attacks. The...
VulnCheck KEV: CVE-2024-4761
Google Chromium V8 Engine contains an unspecified out-of-bounds memory write vulnerability via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera...
The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers allows attackers to access confidential information or cause service failures.
The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information or cause service failures...
The vulnerability of the site isolation function in Microsoft Edge and Google Chrome browsers allows a hacker to gain access to confidential information.
The vulnerability of site isolation functions in Microsoft Edge and Google Chrome browsers is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information from a remote location...
The vulnerability of the Font component (the default font used by Microsoft Edge and Google Chrome browsers) allows a perpetrator to gain access to potentially confidential information.
The vulnerability of the Font component the default font used by Microsoft Edge and Google Chrome browsers is related to memory-related reading operations. Exploiting this vulnerability can allow an attacker to gain access to potentially confidential information from a remote location...
The vulnerability of the WebAssembly component in Microsoft Edge and Google Chrome allows a hacker to execute arbitrary code.
The vulnerability of the WebAssembly component in Microsoft Edge and Google Chrome relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
The vulnerability in the implementation of the QUIC protocol in Microsoft Edge and Google Chrome browsers allows a attacker to access confidential information.
The vulnerability of Microsoft Edge and Google Chrome browsers’ QUIC protocol implementation is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information remotely...
The vulnerability of the Prompts component in Microsoft Edge and Google Chrome browsers allows a perpetrator to access confidential information.
The vulnerability of the Prompts component in Microsoft Edge and Google Chrome is related to improper security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information remotely...
The vulnerability of Microsoft Edge browser on Android, related to errors in cookie handling, allows a hacker to gain unauthorized access to protected information.
The vulnerability of Microsoft Edge browser for Android involves errors in cookie handling. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.
The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote location...
The vulnerability of the Dawn component in browsers Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.
The vulnerability of the Dawn component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote location...
CVE-2024-29987
Microsoft Edge Chromium-based Information Disclosure Vulnerability...
PT-2024-3083 · Google +6 · Google Chrome +6
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 124.0.6367.60 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in the Networks component, allowing a remote attacker to bypass mixed content...
Microsoft Fixes 149 Flaws in Huge April Patch Release, Zero-Days Included
Microsoft has released security updates for the month of April 2024 to remediate a record 149 flaws, two of which have come under active exploitation in the wild. Of the 149 flaws, three are rated Critical, 142 are rated Important, three are rated Moderate, and one is rated Low in severity. The...
Microsoft Edge browser vulnerability, related to bypassing security measures, allows attackers to circumvent existing security restrictions.
The vulnerability of Microsoft Edge relates to bypassing security measures. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions by using a specially created HTML page...
Microsoft Edge 安全漏洞
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A spoofing vulnerability exists in Microsoft Edge Chromium-based Webview2, which can be exploited by attackers to conduct spoofing attacks...
PT-2024-2935 · Microsoft · Edge
Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to improper restriction of displayed UI layers or frames, which can be exploited by a remote attacker to conduct spoofing attacks. Recommendations...
The vulnerability of the WebAssembly module in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.
The vulnerability of the WebAssembly module in Google Chrome and Microsoft Edge relates to access to resources through incompatible types. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created HTML page...
CVE-2024-29057
Microsoft Edge Chromium-based Spoofing Vulnerability...
Microsoft Edge 安全漏洞
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge Chromium-based suffers from a spoofing vulnerability that can be exploited by attackers to override and spoof elements of the user interface...