Adobe Systems Incorporated: CVE-2024-20709 Javascript Implementation PDF Vulnerability

This CVE was assigned by Adobe Systems Incorporated. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Edge (Chromium) < 120.0.2336.0 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 120.0.2336.0. It is, therefore, affected by multiple vulnerabilities as referenced in the January 11, 2024 advisory. - Insufficient data validation in Extensions in Google Chrome prior to 120.0.6099.216 allowed an...

PT-2024-1410 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Acrobat Reader T5 MSFT Edge versions 120.0.2210.91 and earlier Description: The issue is related to insufficient input validation, which can be exploited by an unauthenticated attacker to cause an application denial-of-service in the context ...

PT-2024-1411 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Acrobat Reader T5 MSFT Edge versions 120.0.2210.91 and earlier Description: The issue is related to insufficient input validation, which can be exploited by an unauthenticated attacker to cause an application denial-of-service in the context ...

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A security bypass vulnerability exists in Microsoft Edge Chromium-based, which can be exploited by attackers to bypass security restrictions...

PT-2024-1078 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insufficient access control in Microsoft Edge, which can be exploited by an attacker to elevate their privileges using a specially crafted file...

KLA62929 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A security feature bypass vulnerability in...

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Jan 2024)

This host is missing an important security update according to Microsoft Edge Chromium-Based updates. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Microsoft and Adobe Patch Tuesday, January 2024 Security Update Review

The first edition of the Microsoft Patch Tuesday for 2024 is now live! Microsoft has released fewer than usual security fixes in this months update. We invite you to join us to review and discuss the details of these security updates and patches. Microsoft Patch Tuesday for January 2024 Microsoft...

CVE-2024-22125 Information Disclosure vulnerability in Microsoft Edge browser extension (SAP GUI connector for Microsoft Edge)

Under certain conditions the Microsoft Edge browser extension SAP GUI connector for Microsoft Edge - version 1.0, allows an attacker to access highly sensitive information which would otherwise be restricted causing high impact on confidentiality...

CVE-2024-22125 Information Disclosure vulnerability in Microsoft Edge browser extension (SAP GUI connector for Microsoft Edge)

Under certain conditions the Microsoft Edge browser extension SAP GUI connector for Microsoft Edge - version 1.0, allows an attacker to access highly sensitive information which would otherwise be restricted causing high impact on confidentiality...

CVE-2024-22125

The CVE-2024-22125 affects the SAP GUI connector for Microsoft Edge extension, version 1.0. The root cause is improper access control in the Edge extension, enabling a remote attacker to disclose highly sensitive information that should be restricted. Impact is high for Confidentiality; the conne...

SAP GUI Security Vulnerability

SAP GUI is an application from SAP, a German company. graphical user interface for SAP systems. A security vulnerability exists in the SAP GUI connector for Microsoft Edge, which arises from allowing an attacker, under certain circumstances, to access highly sensitive information that would...

PT-2024-1086 · Sap · Sap Gui Connector For Microsoft Edge

Name of the Vulnerable Software and Affected Versions: SAP GUI connector for Microsoft Edge version 1.0 Description: The issue allows an attacker to access highly sensitive information that would otherwise be restricted, causing a high impact on confidentiality. This is related to the disclosure ...

Chromium: CVE-2024-0225 Use after free in WebGPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2024-0224 Use after free in WebAudio

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2024-0223 Heap buffer overflow in ANGLE

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

KLA62769 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in WebAudio can be exploited to cause denial of service or...

Microsoft Edge (Chromium) < 120.0.2210.121 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 120.0.2210.121. It is, therefore, affected by multiple vulnerabilities as referenced in the January 5, 2024 advisory. - Use after free in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker who had...

PT-2024-1857 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 122.0.6261.57 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in Site Isolation, allowing a remote attacker to bypass content security policy...