Lucene search
+L

1641 matches found

BDU FSTEC
BDU FSTEC
added 2024/10/23 12:0 a.m.7 views

The vulnerability of the PictureInPicture component in Google Chrome and Microsoft Edge browsers allows attackers to perform spoofing attacks.

The vulnerability of the PictureInPicture component in Google Chrome and Microsoft Edge is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using a specially created HTML page...

5CVSS5.5AI score0.0028EPSS
SaveExploits0References13Affected Software7
BDU FSTEC
BDU FSTEC
added 2024/10/20 12:0 a.m.10 views

The vulnerability of the application programming interface WebAuthn in browsers Google Chrome and Microsoft Edge allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Application Programming Interface WebAuthn of Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to compromise the confidentiality, integrity, and accessibility of the...

10CVSS7.6AI score0.0076EPSS
SaveExploits0References13Affected Software6
BDU FSTEC
BDU FSTEC
added 2024/10/20 12:0 a.m.12 views

The vulnerability of the DevTools suite for web development in Microsoft Edge and Google Chrome browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the DevTools suite for web development in Microsoft Edge and Google Chrome relates to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.5AI score0.00325EPSS
SaveExploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2024/10/20 12:0 a.m.10 views

The vulnerability of the user interfaces of Google Chrome and Microsoft Edge allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the user interfaces of Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information through a specially created...

10CVSS5.5AI score0.00375EPSS
SaveExploits1References8Affected Software4
CNNVD
CNNVD
added 2024/10/18 12:0 a.m.11 views

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge Chromium-based suffers from a spoofing vulnerability that can be exploited by attackers to conduct spoofing attacks...

4.3CVSS6.4AI score0.00457EPSS
SaveExploits0References3
OSV
OSV
added 2024/10/17 11:15 p.m.4 views

CVE-2024-43587

Microsoft Edge Chromium-based Remote Code Execution Vulnerability...

8.1CVSS5.9AI score0.00891EPSS
SaveExploits0References1
OSV
OSV
added 2024/10/17 11:15 p.m.2 views

CVE-2024-43566

Microsoft Edge Chromium-based Remote Code Execution Vulnerability...

9.8CVSS5.9AI score0.0106EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2024/10/17 7:0 a.m.31 views

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

9.8CVSS7.1AI score0.0106EPSS
SaveExploits0
CNNVD
CNNVD
added 2024/10/17 12:0 a.m.7 views

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A remote code execution vulnerability exists in Microsoft Edge Chromium-based, which can be exploited by an attacker to execute arbitrary code on a system...

8.3CVSS8.2AI score0.00718EPSS
SaveExploits0References3
The Hacker News
The Hacker News
added 2024/10/16 10:50 a.m.67 views

North Korean ScarCruft Exploits Windows Zero-Day to Spread RokRAT Malware

The North Korean threat actor known as ScarCruft has been linked to the zero-day exploitation of a now-patched security flaw in Windows to infect devices with malware known as RokRAT. The vulnerability in question is CVE-2024-38178 CVSS score: 7.5, a memory corruption bug in the Scripting Engine...

8.8CVSS8.3AI score0.4138EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/10/14 12:0 a.m.16 views

The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.2AI score0.00344EPSS
SaveExploits0References7Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/10/14 12:0 a.m.14 views

The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers allows a hacker to replace the user’s interface.

The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers is related to improper security checks for standard elements. Exploiting this vulnerability could allow a malicious actor to replace the user interface with a specially created HTML page...

5CVSS6.4AI score0.00347EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2024/10/14 12:0 a.m.12 views

The vulnerability of the Media Router component in Microsoft Edge and Google Chrome browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Media Router component in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS7.2AI score0.00385EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2024/10/10 12:0 a.m.9 views

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers allows attackers to disclose protected information.

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers is related to improper security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

5.4CVSS5.4AI score
SaveExploits0References7Affected Software5
The Hacker News
The Hacker News
added 2024/10/09 6:53 a.m.64 views

Microsoft Issues Security Update Fixing 118 Flaws, Two Actively Exploited in the Wild

Microsoft has released security updates to fix a total of 118 vulnerabilities across its software portfolio, two of which have come under active exploitation in the wild. Of the 118 flaws, three are rated Critical, 113 are rated Important, and two are rated Moderate in severity. The Patch Tuesday...

9.8CVSS8.6AI score0.84345EPSS
SaveExploits5
BDU FSTEC
BDU FSTEC
added 2024/10/04 12:0 a.m.12 views

Microsoft Edge browser’s vulnerability, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Edge relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS6.3AI score0.00954EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/10/03 12:0 a.m.5 views

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge that stems from an improper implementation in V8...

6.5AI score
SaveExploits0References2
Citrix
Citrix
added 2024/09/30 12:0 a.m.14 views

FIDO2 redirection in Chrome and Edge doesn't work

https://docs.citrix.com/en-us/citrix-virtual-apps-desktops/secure/fido2.htmllocal-authorization-and-virtual-authentication-using-fido2-and-webauthn was followed. However devices which use Fido2 such as fingerprint readers and YubiKey devices are not detected in the browser,...

7.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/09/30 12:0 a.m.15 views

The vulnerability of the Skia graphic library used by Microsoft Edge and Google Chrome browsers allows attackers to expose protected information or compromise data integrity.

The vulnerability of the Skia graphic library in Microsoft Edge and Google Chrome is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to disclose sensitive information or compromise data integrity through a specially crafted HTML page...

7.5CVSS7.2AI score0.00364EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2024/09/30 12:0 a.m.17 views

The vulnerability of the Skia graphic library used by Microsoft Edge and Google Chrome browsers allows attackers to execute arbitrary code.

The vulnerability of the Skia graphic library in Microsoft Edge and Google Chrome exists due to a boundary error in processing untrusted HTML content. Exploiting this vulnerability can allow an attacker to execute arbitrary code remotely...

10CVSS7.6AI score0.00428EPSS
SaveExploits0References12Affected Software5
Rows per page
Query Builder