Multiple vulnerabilities in Microsoft Browser

説明

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, spoof user interface.

Below is a complete list of vulnerabilities:

1. Use after free vulnerability in Import can be exploited to cause denial of service or execute arbitrary code.
2. A spoofing vulnerability in Microsoft Edge (Chromium-based) can be exploited remotely to spoof user interface.
3. Validation of untrusted input vulnerability in Intents can be exploited to cause denial of service.
4. Validation of untrusted input vulnerability in Safe Browsing can be exploited to cause denial of service.
5. Use after free vulnerability in Media can be exploited to cause denial of service or execute arbitrary code.
6. Security UI vulnerability in Full Screen can be exploited to spoof user interface.
7. Use after free vulnerability in CSS can be exploited to cause denial of service or execute arbitrary code.
8. Type confusion vulnerability in Blink can be exploited to cause denial of service.
9. Policy enforcement vulnerability in Developer Tools can be exploited to cause denial of service.
10. Policy enforcement vulnerability in Custom Tabs can be exploited to cause denial of service.

オリジナルアドバイザリー

• CVE-2022-3311

• CVE-2022-41035
• CVE-2022-3317
• CVE-2022-3316
• CVE-2022-3307
• CVE-2022-3313
• CVE-2022-3304
• CVE-2022-3315
• CVE-2022-3308
• CVE-2022-3310

エクスプロイテーション

Public exploits exist for this vulnerability.

関連製品

• Microsoft-Edge

CVEリスト

• CVE-2022-3311
  high
• CVE-2022-3307
  critical
• CVE-2022-3308
  high
• CVE-2022-3317
  warning
• CVE-2022-3310
  high
• CVE-2022-3304
  critical
• CVE-2022-3315
  critical
• CVE-2022-3316
  warning
• CVE-2022-3313
  high
• CVE-2022-41035
  high

KBリスト

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com