Multiple vulnerabilities in Microsoft Browser

Beschreibung

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service, gain privileges, execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. Security UI vulnerability can be exploited to spoof user interface.
2. An elevation of privilege vulnerability in Microsoft Edge (Chromium-based) Update can be exploited remotely to gain privileges.
3. An elevation of privilege vulnerability in Extensions Google Chrome can be exploited remotely to gain privileges.
4. An elevation of privilege vulnerability in Microsoft Edge (Chromium-based) can be exploited remotely to gain privileges.
5. An elevation of privilege vulnerability in Navigation Google Chrome can be exploited remotely to gain privileges.
6. Heap buffer overflow vulnerability in Skia can be exploited to cause denial of service.
7. Type confusion vulnerability in V8 can be exploited to cause denial of service.
8. Information disclosure vulnerability in Fenced Frames Google Chrome can be exploited to obtain sensitive information.
9. Heap buffer overflow vulnerability in Google Chrome can be exploited to cause denial of service.
10. Heap buffer overflow vulnerability in Tracing Google Chrome can be exploited to cause denial of service.

Ursprüngliche Informationshinweise

• CVE-2025-0439

• CVE-2025-21399
• CVE-2025-0443
• CVE-2025-21185
• CVE-2025-0448
• CVE-2025-0447
• CVE-2025-0446
• CVE-2025-0440
• CVE-2025-0436
• CVE-2025-0435
• CVE-2025-0434
• CVE-2025-0442
• CVE-2025-0441
• CVE-2025-0437
• CVE-2025-0438

Ausnutzung

Public exploits exist for this vulnerability.

Betroffene Produkte

• Microsoft-Edge

CVE Liste

• CVE-2025-0439
  high
• CVE-2025-0435
  high
• CVE-2025-0436
  critical
• CVE-2025-0434
  critical
• CVE-2025-0443
  critical
• CVE-2025-0437
  critical
• CVE-2025-0440
  high
• CVE-2025-0448
  warning
• CVE-2025-0438
  critical
• CVE-2025-0441
  high
• CVE-2025-0447
  critical
• CVE-2025-0446
  warning
• CVE-2025-0442
  high
• CVE-2025-21399
  high
• CVE-2025-21185
  high

KB Liste

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com