Kaspersky ID:
KLA61997
Erkennungsdatum:
11/16/2023
Aktualisiert:
03/26/2025

Beschreibung

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to spoof user interface, execute arbitrary code, cause denial of service.

Below is a complete list of vulnerabilities:

  1. A spoofing vulnerability in Microsoft Edge (Chromium-based) can be exploited remotely to spoof user interface.
  2. Use after free vulnerability in Garbage Collection can be exploited to cause denial of service or execute arbitrary code.
  3. A remote code execution vulnerability in Microsoft Edge (Chromium-based) can be exploited remotely to execute arbitrary code.
  4. Use after free vulnerability in Navigation can be exploited to cause denial of service or execute arbitrary code.

Ursprüngliche Informationshinweise

Ausnutzung

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Betroffene Produkte

CVE Liste

  • CVE-2023-6112
    critical
  • CVE-2023-5997
    critical
  • CVE-2023-36026
    warning
  • CVE-2023-36008
    high

KB Liste

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com

Sie haben einen Fehler in der Beschreibung der Schwachstelle gefunden? Mitteilen!
Kaspersky Next
Let´s go Next: Cybersicherheit neu gedacht
Erfahren Sie mehr
Neu: Kaspersky!
Dein digitales Leben verdient umfassenden Schutz!
Erfahren Sie mehr
Do you want to save your changes?
Your message has been sent successfully.