Chromium: CVE-2022-1313 Use after free in tab groups

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2022-1307 Inappropriate implementation in full screen

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Google Releases Urgent Chrome Update to Patch Actively Exploited Zero-Day Flaw

Google on Thursday shipped emergency patches to address two security issues in its Chrome web browser, one of which it says is being actively exploited in the wild. Tracked as CVE-2022-1364, the tech giant described the high-severity bug as a case of type confusion in the V8 JavaScript engine...

PT-2022-2592 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insufficient input validation in Microsoft Edge. It may allow a remote attacker to elevate their privileges. Recommendations: At the moment,...

KLA12513 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in BFCache ca...

Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge...

Microsoft Edge (Chromium-based) 欺骗漏洞

Microsoft Edge is a web browser that comes with versions of Windows 10 and later, and a spoofing vulnerability exists in Microsoft Edge Chromium-based. An attacker could exploit this vulnerability to conduct spoofing attacks...

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CNVD-2022-60117)

Microsoft Edge is a web browser that comes with versions of Windows 10 and later, and an elevation of privilege vulnerability exists in Microsoft Edge Chromium-based. An attacker could exploit this vulnerability to elevate privileges...

Dismantling ZLoader: How malicious ads led to disabled security tools and ransomware

As announced today, Microsoft took action against the ZLoader trojan by working with telecommunications providers around the world to disrupt key ZLoader infrastructure. We used our research into this threat to enrich our protection technologies and ensure this infrastructure could no longer be...

Dismantling ZLoader: How malicious ads led to disabled security tools and ransomware

As announced today, Microsoft took action against the ZLoader trojan by working with telecommunications providers around the world to disrupt key ZLoader infrastructure. We used our research into this threat to enrich our protection technologies and ensure this infrastructure could no longer be...

PT-2022-6708 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insufficient access controls in Microsoft Edge, allowing a remote attacker to bypass security restrictions, elevate privileges, or execute...

Chromium: CVE-2022-1232 Type Confusion in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

The vulnerability in the application programming interface for data exchange via Web Share browsers like Google Chrome and Microsoft Edge allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the application programming interface for data exchange via Web Share browsers in Google Chrome and Microsoft Edge is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker to compromise the confidentiality...

The vulnerability of the Tab Strip control element in Google Chrome and Microsoft Edge browsers allows a hacker to gain unauthorized access to protected information.

The vulnerability of the Tab Strip control element in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created web page...

KLA12499 Type Confusion vulnerability in Microsoft Browser

Type Confusion vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories CVE-2022-1232 Exploitation Malware exists for this vulnerability. Usually such malware is classified as Exploit. More...

The vulnerability of the Cast UI interface in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Cast UI interface in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Microsoft Edge (Chromium) < 100.0.1185.36 Vulnerability

The version of Microsoft Edge installed on the remote Windows host is prior to 100.0.1185.36. It is, therefore, affected by a vulnerability as referenced in the April 7, 2022 advisory. - Type confusion in V8 in Google Chrome prior to 100.0.4896.75 allowed a remote attacker to potentially exploit...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

The vulnerability of the Portals components in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the Portals components in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

The vulnerability of WebRTC extensions in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of WebRTC extensions in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...