Multiple vulnerabilities in Microsoft Browser

Descripción

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, spoof user interface.

Below is a complete list of vulnerabilities:

1. Use after free vulnerability in Import can be exploited to cause denial of service or execute arbitrary code.
2. A spoofing vulnerability in Microsoft Edge (Chromium-based) can be exploited remotely to spoof user interface.
3. Validation of untrusted input vulnerability in Intents can be exploited to cause denial of service.
4. Validation of untrusted input vulnerability in Safe Browsing can be exploited to cause denial of service.
5. Use after free vulnerability in Media can be exploited to cause denial of service or execute arbitrary code.
6. Security UI vulnerability in Full Screen can be exploited to spoof user interface.
7. Use after free vulnerability in CSS can be exploited to cause denial of service or execute arbitrary code.
8. Type confusion vulnerability in Blink can be exploited to cause denial of service.
9. Policy enforcement vulnerability in Developer Tools can be exploited to cause denial of service.
10. Policy enforcement vulnerability in Custom Tabs can be exploited to cause denial of service.

Notas informativas originales

• CVE-2022-3311

• CVE-2022-41035
• CVE-2022-3317
• CVE-2022-3316
• CVE-2022-3307
• CVE-2022-3313
• CVE-2022-3304
• CVE-2022-3315
• CVE-2022-3308
• CVE-2022-3310

Explotación

Public exploits exist for this vulnerability.

Productos relacionados

• Microsoft-Edge

Lista CVE

• CVE-2022-3311
  high
• CVE-2022-3307
  critical
• CVE-2022-3308
  high
• CVE-2022-3317
  warning
• CVE-2022-3310
  high
• CVE-2022-3304
  critical
• CVE-2022-3315
  critical
• CVE-2022-3316
  warning
• CVE-2022-3313
  high
• CVE-2022-41035
  high

Lista KB

Leer más

Conozca las estadísticas de las vulnerabilidades que se propagan en su región statistics.securelist.com