KLA12464
Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions.

Below is a complete list of vulnerabilities:

1. Use after free vulnerability in File Manager can be exploited to cause denial of service or execute arbitrary code.
2. Implementation vulnerability in Gamepad API can be exploited to bypass security restrictions.
3. Use after free vulnerability in Animation can be exploited to cause denial of service or execute arbitrary code.
4. Heap buffer overflow vulnerability in Tab Groups can be exploited to cause denial of service.
5. Use after free vulnerability in ANGLE can be exploited to cause denial of service or execute arbitrary code.
6. Integer overflow vulnerability in Mojo can be exploited to cause denial of service.
7. Use after free vulnerability in Webstore API can be exploited to cause denial of service or execute arbitrary code.
8. Use after free vulnerability in GPU can be exploited to cause denial of service or execute arbitrary code.

Microsoft Edge (Chromium-based)

Install necessary updates from the Settings and more menu, that are listed in your About Microsoft Edge page (Microsoft Edge About page usually can be accessed from the Help and feedback option)
Microsoft Edge update settings

CVE-2022-0603
CVE-2022-0610
CVE-2022-0609
CVE-2022-0604
CVE-2022-0606
CVE-2022-0608
CVE-2022-0605
CVE-2022-0607