KLA12464
Multiple vulnerabilities in Microsoft Browser

Updated: 02/21/2022
Detect date
?
02/16/2022
Severity
?
High
Description

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions.

Below is a complete list of vulnerabilities:

  1. Use after free vulnerability in File Manager can be exploited to cause denial of service or execute arbitrary code.
  2. Implementation vulnerability in Gamepad API can be exploited to bypass security restrictions.
  3. Use after free vulnerability in Animation can be exploited to cause denial of service or execute arbitrary code.
  4. Heap buffer overflow vulnerability in Tab Groups can be exploited to cause denial of service.
  5. Use after free vulnerability in ANGLE can be exploited to cause denial of service or execute arbitrary code.
  6. Integer overflow vulnerability in Mojo can be exploited to cause denial of service.
  7. Use after free vulnerability in Webstore API can be exploited to cause denial of service or execute arbitrary code.
  8. Use after free vulnerability in GPU can be exploited to cause denial of service or execute arbitrary code.
Affected products

Microsoft Edge (Chromium-based)

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Original advisories

CVE-2022-0603
CVE-2022-0610
CVE-2022-0609
CVE-2022-0604
CVE-2022-0606
CVE-2022-0608
CVE-2022-0605
CVE-2022-0607

Impacts
?
ACE 
[?]

DoS 
[?]

SB 
[?]
Related products
Microsoft Edge
Find out the statistics of the vulnerabilities spreading in your region