Multiple vulnerabilities in Microsoft Browser

Description

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, execute arbitrary code, bypass security restrictions, gain privileges.

Below is a complete list of vulnerabilities:

1. An information disclosure vulnerability in Microsoft Edge (Chromium-based) can be exploited remotely to obtain sensitive information.
2. Implementation vulnerability in Autofill can be exploited to cause denial of service.
3. Use after free vulnerability in Media Stream can be exploited to cause denial of service or execute arbitrary code.
4. Use after free vulnerability in Side Panel Search can be exploited to cause denial of service or execute arbitrary code.
5. Use after free vulnerability in Media Capture can be exploited to cause denial of service or execute arbitrary code.
6. Implementation vulnerability in Web Browser UI can be exploited to cause denial of service.
7. An elevation of privilege vulnerability in Microsoft Edge (Chromium-based) can be exploited remotely to gain privileges.

Fiches de renseignement originales

• CVE-2023-38174

• CVE-2023-6511
• CVE-2023-6508
• CVE-2023-6509
• CVE-2023-36880
• CVE-2023-6510
• CVE-2023-6512
• CVE-2023-35618

Produits associés

• Microsoft-Edge

Liste CVE

• CVE-2023-6508
  critical
• CVE-2023-6509
  critical
• CVE-2023-6511
  warning
• CVE-2023-6510
  critical
• CVE-2023-6512
  high
• CVE-2023-38174
  warning
• CVE-2023-36880
  warning
• CVE-2023-35618
  critical

Liste KB

En savoir plus

Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com