11063 matches found
The vulnerability in the Microsoft Edge browser extension allows a hacker to enhance their privileges.
The vulnerability of the Microsoft Edge browser’s “Feedback” extension is related to insecure handling of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
The vulnerability of ChakraCore, a JavaScript script handler for browsers Internet Explorer and Microsoft Edge, relates to improper handling of objects in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the ChakraCore JavaScript script handler in browsers Internet Explorer and Microsoft Edge is related to improper handling of objects in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Microsoft Edge’s vulnerability related to request processing errors allows attackers to gain unauthorized access to protected information.
The vulnerability of Microsoft Edge is related to errors in request processing. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the PDF Reader component of the Microsoft Edge browser, which allows a hacker to execute arbitrary code.
The vulnerability of the Windows operating system’s PDF library, specifically Microsoft Edge browsers, arises due to an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created Microsoft...
The vulnerability in the Microsoft Edge web browser is related to insufficient checking of permission assignment for critical resources. This allows attackers to enhance their privileges and execute arbitrary code.
The vulnerability in the Microsoft Edge web browser is related to insufficient checking of permission assignment for critical resources. Exploiting this vulnerability can allow a remote attacker to enhance their privileges and execute arbitrary code...
JVN#40039627: Chrome Extension for e-Tax Reception System vulnerable to arbitrary command execution
Chrome Extension for e-Tax Reception System provided by National Tax Agency is an extension to use the e-Tax Reception System on Google Chrome and/or Chromium-based versions of Microsoft Edge. When a user runs a Chrome Extension for e-Tax Reception System, a specially crafted parameter by an...
June 9, 2020—KB4560960 (OS Builds 18362.900 and 18363.900) - EXPIRED
None None...
The vulnerability of the Chakra browser script mechanism in Microsoft Edge allows a hacker to execute arbitrary code.
The vulnerability of the Chakra scenario mechanism in Microsoft Edge browsers relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Code Injection in eugeneware/windows-edge
Overview windows-edge allows you to launch a new Microsoft Edge tab on Windows The issue occurs because a user input is formatted inside a command that will be executed without any check...
CVE-2020-9633
Adobe Flash Player Desktop Runtime 32.0.0.371 and earlier, Adobe Flash Player for Google Chrome 32.0.0.371 and earlier, and Adobe Flash Player for Microsoft Edge and Internet Explorer 32.0.0.330 and earlier have an use after free vulnerability. Successful exploitation could lead to arbitrary code...
Microsoft Edge Spoofing Vulnerability (CNVD-2020-61591)
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge based on Chromium IE mode, which arises from the program not handling specific redirects correctly. The vulnerability can be exploited by...
Microsoft Edge Elevation of Privilege Vulnerability (CNVD-2020-61590)
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge based on Chromium that stems from the Feedback extension not properly validating input. An attacker can exploit the vulnerability to writ...
Adobe Flash Player Microsoft Edge and Internet Explorer Security Update (APSB20-30) - Windows
Adobe Flash Player is prone to an arbitrary code execution vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...
CVE-2020-1242
An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka 'Microsoft Edge Information Disclosure Vulnerability'...
CVE-2020-1220
A spoofing vulnerability exists when theMicrosoft Edge Chromium-based in IE Mode improperly handles specific redirects, aka 'Microsoft Edge Chromium-based in IE Mode Spoofing Vulnerability'...
Spoofing
A spoofing vulnerability exists when theMicrosoft Edge Chromium-based in IE Mode improperly handles specific redirects, aka 'Microsoft Edge Chromium-based in IE Mode Spoofing Vulnerability'...
Information disclosure
An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka 'Microsoft Edge Information Disclosure Vulnerability'...
CVE-2020-1242
CVE-2020-1242 is an information-disclosure issue in Microsoft Edge where cross-origin requests are mishandled, enabling an attacker to determine the origin of pages viewed in the affected browser (Edge information leakage). CNVD-2020-61592 documents this vulnerability and OpenVAS KBs reference it...