Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

...

The vulnerability of the Libavif library for encoding and decoding .avif files allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information. This vulnerability is exploitable through attacks using Google Chrome and Microsoft Edge browsers.

The vulnerability of the Libavif library for encoding and decoding .avif files in Google Chrome and Microsoft Edge browsers is related to the use of memory after file processing for .avif formats. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, an...

PT-2023-8689 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: ScaleFusion version 10.5.2 Description: The issue is related to inadequate access control in the Scalefusion MDM Agent, allowing an attacker to open arbitrary websites. Specifically, a search can be made from a tooltip, which can be used to...

CVE-2023-36008

Microsoft Edge Chromium-based Remote Code Execution Vulnerability...

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

PT-2023-7190 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue exists due to insufficient input validation in the browser. Exploitation of this issue may allow an attacker to execute arbitrary code. Recommendations: At t...

CVE-2023-36027

Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...

CVE-2023-36024

Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...

PT-2023-7020 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to the browser's failure to properly enforce web page structure protections. This can allow a remote attacker to elevate their privileges...

CVE-2023-36029

Microsoft Edge Chromium-based Spoofing Vulnerability...

Microsoft Edge Security Breach

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge that stems from the presence of a remote code execution vulnerability...

Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

Microsoft Edge Resource Management Error Vulnerability

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. A resource management error vulnerability exists in Microsoft Edge versions 79.0.309.71 through 118.0.2088.69, which stems from a boundary error when processing PDF files, allowing remote...

CVE-2023-36559

Microsoft Edge Chromium-based Spoofing Vulnerability...

The vulnerability of Microsoft Edge browser, related to insufficient validation of input data, allows attackers to escalate their privileges.

The vulnerability of Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

Microsoft Edge browser’s vulnerability, related to insufficient validation of input data, allows attackers to escalate their privileges.

The vulnerability of Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

PT-2023-5456 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to incorrect data processing in Microsoft Edge, allowing a remote attacker to perform a spoofing attack. Recommendations: At the moment, there is ...

Microsoft Edge Security Breach

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. Microsoft Edge has a security vulnerability that stems from the presence of a spoofing vulnerability...

The vulnerability of Microsoft Edge browser (based on Chromium) relates to insufficient validation of input data, allowing attackers to escalate their privileges.

The vulnerability of Microsoft Edge based on Chromium is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...

PT-2023-4454 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insufficient access control in Microsoft Edge, allowing a remote attacker to elevate their privileges. Recommendations: At the moment, there is...