Lucene search
+L

10638 matches found

CNNVD
CNNVD
added 2023/12/07 12:00 a.m.10 views

Microsoft Edge Security Breach

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. Microsoft Edge has a security vulnerability that stems from the presence of an elevation of privilege vulnerability...

9.6CVSS8.9AI score0.02925EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2023/12/07 12:00 a.m.10 views

Microsoft Edge 安全漏洞

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge Chromium-based suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

4.3CVSS5.2AI score0.02202EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/12/07 12:00 a.m.10 views

PT-2023-7497 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The vulnerability is related to insufficient input validation in Microsoft Edge, allowing a remote attacker to bypass security restrictions and elevate their privilege...

9.6CVSS9.3AI score0.02925EPSS
SaveExploits0References19
Tenable Nessus
Tenable Nessus
added 2023/12/07 12:00 a.m.50 views

Microsoft Edge (Chromium) < 120.0.2210.61 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 120.0.2210.61. It is, therefore, affected by multiple vulnerabilities as referenced in the December 7, 2023 advisory. - Microsoft Edge Chromium-based Elevation of Privilege Vulnerability CVE-2023-35618 - Microsoft Edge...

9.6CVSS7.1AI score0.02925EPSS
SaveExploits1References17
Kaspersky
Kaspersky
added 2023/12/07 12:00 a.m.53 views

KLA62330 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, execute arbitrary code, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. An informati...

9.6CVSS9.6AI score0.02925EPSS
SaveExploits1References10
BDU FSTEC
BDU FSTEC
added 2023/12/04 12:00 a.m.14 views

The vulnerability of the Libavif library for encoding and decoding .avif files allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information. This vulnerability is exploitable through attacks using Google Chrome and Microsoft Edge browsers.

The vulnerability of the Libavif library for encoding and decoding .avif files in Google Chrome and Microsoft Edge browsers is related to the issue of operations going beyond the buffer boundaries in memory when processing .avif files. Exploiting this vulnerability can allow an attacker to...

10CVSS7.8AI score0.01296EPSS
SaveExploits0References15Affected Software4
Positive Technologies
Positive Technologies
added 2023/12/03 12:00 a.m.6 views

PT-2023-8336 · Google +5 · Google Chrome +6

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 120.0.6099.224 Microsoft Edge versions affected versions not specified Description: The issue is related to a type confusion in the V8 JavaScript engine, which can be exploited by a remote attacker to potential...

10CVSS7.6AI score0.99979EPSS
SaveExploits130References1101
Microsoft CVE
Microsoft CVE
added 2023/11/29 6:18 p.m.48 views

Chromium: CVE-2023-6351 Use after free in libavif

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.8AI score0.0093EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2023/11/29 6:18 p.m.51 views

Chromium: CVE-2023-6350 Out of bounds memory access in libavif

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.8AI score0.01296EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2023/11/29 6:18 p.m.39 views

Chromium: CVE-2023-6348 Type Confusion in Spellcheck

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.8AI score0.01078EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2023/11/29 6:18 p.m.35 views

Chromium: CVE-2023-6347 Use after free in Mojo

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.9AI score0.01138EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2023/11/29 6:18 p.m.46 views

Chromium: CVE-2023-6346 Use after free in WebAudio

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.9AI score0.01003EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
added 2023/11/29 6:18 p.m.50 views

Chromium: CVE-2023-6345 Integer overflow in Skia

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2023-6345 exists in the wild...

9.6CVSS9.4AI score0.16468EPSS
SaveExploits0
The Hacker News
The Hacker News
added 2023/11/29 4:27 a.m.193 views

Zero-Day Alert: Google Chrome Under Active Attack, Exploiting New Vulnerability

Google has rolled out security updates to fix seven security issues in its Chrome browser, including a zero-day that has come under active exploitation in the wild. Tracked as CVE-2023-6345, the high-severity vulnerability has been described as an integer overflow bug in Skia, an open source 2D...

9.6CVSS9.2AI score0.99979EPSS
SaveExploits17
Kaspersky
Kaspersky
added 2023/11/29 12:00 a.m.38 views

KLA62208 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Type confusion vulnerability in Spellcheck can be exploited to cause denial of service. 2...

9.6CVSS10AI score0.16468EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2023/11/29 12:00 a.m.43 views

Microsoft Edge (Chromium) < 118.0.2088.122 / 119.0.2151.97 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 118.0.2088.122 / 119.0.2151.97. It is, therefore, affected by multiple vulnerabilities as referenced in the November 29, 2023 advisory. - Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remo...

9.6CVSS8.6AI score0.16468EPSS
SaveExploits0References13
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:00 a.m.9 views

The vulnerability in Microsoft Edge browsers arises due to insufficient validation of input data, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Edge exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

6.6CVSS7AI score0.00591EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2023/11/29 12:00 a.m.13 views

The vulnerability of Microsoft Edge browser, related to information representation errors in the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spear-phishing attacks...

5CVSS5.5AI score0.00803EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2023/11/24 12:00 a.m.51 views

Microsoft Edge (Chromium-Based) Remote Code Execution And Elevation of Privilege Vulnerabilities (Nov 2023)

This host is missing an important security update according to Microsoft Edge Chromium-Based updates. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

7.3CVSS6.4AI score0.0135EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/11/24 12:00 a.m.24 views

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Nov 2023)

This host is missing an important security update according to Microsoft Edge Chromium-Based updates. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

6.6CVSS7.1AI score0.00803EPSS
SaveExploits0References2
Rows per page
Query Builder