Kaspersky ID:
KLA61411
Detect Date:
10/13/2023
Updated:
10/16/2023

Description

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to spoof user interface, cause denial of service, bypass security restrictions, execute arbitrary code.

Below is a complete list of vulnerabilities:

  1. Implementation vulnerability in Navigation can be exploited to cause denial of service.
  2. Implementation vulnerability in DevTools can be exploited to cause denial of service.
  3. Implementation vulnerability in Input can be exploited to cause denial of service.
  4. Implementation vulnerability in Intents can be exploited to cause denial of service.
  5. Implementation vulnerability in Extensions API can be exploited to cause denial of service.
  6. Heap buffer overflow vulnerability in PDF can be exploited to cause denial of service.
  7. Use after free vulnerability in Cast can be exploited to cause denial of service or execute arbitrary code.
  8. Implementation vulnerability in Autofill can be exploited to cause denial of service.
  9. Use after free vulnerability in Blink History can be exploited to cause denial of service or execute arbitrary code.
  10. Implementation vulnerability in Installer can be exploited to cause denial of service.
  11. A spoofing vulnerability in Microsoft Edge (Chromium-based) can be exploited remotely to spoof user interface.
  12. Use after free vulnerability in Site Isolation can be exploited to cause denial of service or execute arbitrary code.
  13. Implementation vulnerability in Fullscreen can be exploited to cause denial of service.
  14. Implementation vulnerability in Downloads can be exploited to cause denial of service.

Original advisories

Related products

CVE list

  • CVE-2023-5476
    unknown
  • CVE-2023-5485
    unknown
  • CVE-2023-5473
    unknown
  • CVE-2023-5478
    unknown
  • CVE-2023-5484
    unknown
  • CVE-2023-5483
    unknown
  • CVE-2023-5474
    unknown
  • CVE-2023-5479
    unknown
  • CVE-2023-5475
    unknown
  • CVE-2023-5218
    unknown
  • CVE-2023-5486
    unknown
  • CVE-2023-5477
    unknown
  • CVE-2023-5487
    unknown
  • CVE-2023-5481
    unknown
  • CVE-2023-36559
    unknown

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com

Found an inaccuracy in the description of this vulnerability? Let us know!
Kaspersky Next
Let’s go Next: redefine your business’s cybersecurity
Learn more
New Kaspersky!
Your digital life deserves complete protection!
Learn more
Confirm changes?
Your message has been sent successfully.