Microsoft Edge (Chromium) < 114.0.1901.183 / 115.0.1901.183 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 114.0.1901.183 / 115.0.1901.183. It is, therefore, affected by multiple vulnerabilities as referenced in the July 21, 2023 advisory. - Microsoft Edge Chromium-based Spoofing Vulnerability CVE-2023-35392 - Microsoft Edg...

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. Microsoft Edge has a security vulnerability that stems from the presence of a spoofing vulnerability...

Memory corruption vulnerability in Microsoft Edge; MilesightVPN and router could be taken over

Since the beginning of July, Cisco Talos has published 40 vulnerability advisories affecting a range of software and hardware, including the Microsoft Edge browser. In our new series called "Vulnerability Roundup," well be recapping the vulnerabilities we recently disclosed to provide readers wit...

Vulnerability of Google Chrome and Microsoft Edge browser installers, allowing attackers to increase their privileges

The vulnerability of Google Chrome and Microsoft Edge browsers is related to insufficient data validation. Exploiting this vulnerability can allow attackers to enhance their privileges...

Microsoft Edge MSDCPDF Javascript addIcon type confusion vulnerability

Talos Vulnerability Report TALOS-2023-1747 Microsoft Edge MSDCPDF Javascript addIcon type confusion vulnerability July 17, 2023 CVE Number CVE-2023-36887 SUMMARY A memory corruption vulnerability exists in the Javascript implementation of the Acrobat-based PDF engine in Microsoft Edge 112.0.1722....

Microsoft Edge’s vulnerability, related to the execution of operations beyond the buffer in memory, allows attackers to

The vulnerability of Microsoft Edge relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2023-36883

Microsoft Edge for iOS Spoofing Vulnerability...

CVE-2023-36887

Microsoft Edge Chromium-based Remote Code Execution Vulnerability...

CVE-2023-36888

Microsoft Edge for Android Chromium-based Tampering Vulnerability...

Spoofing

Microsoft Edge for iOS Spoofing Vulnerability...

Design/Logic Flaw

Microsoft Edge for Android Chromium-based Tampering Vulnerability...

Remote code execution

Microsoft Edge Chromium-based Remote Code Execution Vulnerability...

CVE-2023-36887

CVE-2023-36887 affects Microsoft Edge (Chromium-based). Talos details a memory corruption/type confusion vulnerability in the MSDCPDF Javascript implementation used to process Acrobat-based PDFs, exploitable via specially crafted PDF documents. Affected Edge versions include 112.0.1722.58 and 114...

CVE-2023-36887 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2023-36887 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2023-36888 Microsoft Edge for Android (Chromium-based) Tampering Vulnerability

...

CVE-2023-36888 Microsoft Edge for Android (Chromium-based) Tampering Vulnerability

...

CVE-2023-36888

CVE-2023-36888 affects Microsoft Edge for Android (Chromium-based). Documented as a Tampering Vulnerability that enables spoofing the user interface; CVSS base reflects low impacts to confidentiality, integrity and availability. Connected sources identify affected products as Edge for Android (Ch...

CVE-2023-36883 Microsoft Edge for iOS Spoofing Vulnerability

...

CVE-2023-36883

CVE-2023-36883 concerns a spoofing vulnerability in Microsoft Edge for iOS. The initial description identifies the issue as a spoofing vulnerability affecting Edge on iOS, but does not provide details on root cause, affected versions beyond the platform, or concrete exploitation methods. CVSS met...