Kaspersky ID:
KLA62330
Erkennungsdatum:
12/07/2023
Aktualisiert:
03/26/2025

Beschreibung

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, execute arbitrary code, bypass security restrictions, gain privileges.

Below is a complete list of vulnerabilities:

  1. An information disclosure vulnerability in Microsoft Edge (Chromium-based) can be exploited remotely to obtain sensitive information.
  2. Implementation vulnerability in Autofill can be exploited to cause denial of service.
  3. Use after free vulnerability in Media Stream can be exploited to cause denial of service or execute arbitrary code.
  4. Use after free vulnerability in Side Panel Search can be exploited to cause denial of service or execute arbitrary code.
  5. Use after free vulnerability in Media Capture can be exploited to cause denial of service or execute arbitrary code.
  6. Implementation vulnerability in Web Browser UI can be exploited to cause denial of service.
  7. An elevation of privilege vulnerability in Microsoft Edge (Chromium-based) can be exploited remotely to gain privileges.

Ursprüngliche Informationshinweise

Betroffene Produkte

CVE Liste

  • CVE-2023-6508
    critical
  • CVE-2023-6509
    critical
  • CVE-2023-6511
    warning
  • CVE-2023-6510
    critical
  • CVE-2023-6512
    high
  • CVE-2023-38174
    warning
  • CVE-2023-36880
    warning
  • CVE-2023-35618
    critical

KB Liste

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com

Sie haben einen Fehler in der Beschreibung der Schwachstelle gefunden? Mitteilen!
Kaspersky Next
Let´s go Next: Cybersicherheit neu gedacht
Erfahren Sie mehr
Neu: Kaspersky!
Dein digitales Leben verdient umfassenden Schutz!
Erfahren Sie mehr
Do you want to save your changes?
Your message has been sent successfully.