Spoofing

Microsoft Edge for iOS Spoofing Vulnerability...

Remote code execution

Microsoft Edge Chromium-based Remote Code Execution Vulnerability...

CVE-2021-43221 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2021-43221

CVE-2021-43221 is a Remote Code Execution vulnerability affecting Microsoft Edge (Chromium-based). The connected sources identify it as one of multiple Edge/Chromium vulnerabilities (notably in Edge versions prior to 96.0.1054.29) that can be exploited remotely via network activity. The Nessus en...

CVE-2021-43220 Microsoft Edge for iOS Spoofing Vulnerability

...

CVE-2021-43220

CVE-2021-43220 concerns Microsoft Edge for iOS spoofing vulnerability. Connected sources confirm affected product (Microsoft Edge for iOS) and indicate spoofing can deceive users/UI, with potential authentication bypass noted by PT-2021-5303 (no fix/version details provided). Public CVSS data fro...

CVE-2021-42308

Technical details for CVE-2021-42308 are not publicly available in the provided connected documents. Monitor for updates from listed sources; current materials mention Edge spoofing vulnerability but do not specify affected versions, impact, or remediation within these documents.

CVE-2021-42308 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

Microsoft Edge for iOS Spoofing Vulnerability

Microsoft Edge is a web browser that comes with systems after Windows 10. Microsoft Edge for iOS has a spoofing vulnerability that can be exploited by attackers to conduct spoofing attacks...

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge is a web browser that comes with systems after Windows 10. A remote code execution vulnerability exists in Microsoft Edge Chromium-based, which can be exploited by an attacker to execute arbitrary code on a system...

Stay safe online this holiday shopping season with tips from Microsoft

You may have already noticed this holiday shopping season feels different than those we’ve had before. Headlines about supply chain issues, worker shortages, costs rising—all while the pandemic continues to impact our lives. In my own inbox, I saw emails from brands touting Black Friday sales as...

The vulnerability of the Garbage Collection component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Garbage Collection component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a specially created web page...

Microsoft Edge (Chromium) < 96.0.1052.29 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 96.0.1052.29. It is, therefore, affected by multiple vulnerabilities as referenced in the November 19, 2021 advisory. - Insufficient policy enforcement in iframe sandbox in Google Chrome prior to 96.0.4664.45 allowed a...

Chromium: CVE-2021-38012 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

Chromium: CVE-2021-38019 Insufficient policy enforcement in CORS

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2021-38014 Out of bounds write in Swiftshader

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2021-38013 Heap buffer overflow in fingerprint recognition

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2021-38022 Inappropriate implementation in WebAuthentication

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2021-38020 Insufficient policy enforcement in contacts picker

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...