Kaspersky Threats

KLA11935
Multiple vulnerabilities in Microsoft Browsers

Обновлено: 18/08/2020

Дата обнаружения	11/08/2020
Уровень угрозы	Critical
Описание	Multiple vulnerabilities were found in Microsoft Browsers. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities: A memory corruption vulnerability in Microsoft Edge can be exploited remotely via specially crafted website to execute arbitrary code. A remote code execution vulnerability in Microsoft Edge PDF can be exploited remotely via specially crafted to execute arbitrary code. A memory corruption vulnerability in Scripting Engine can be exploited remotely via specially crafted website to execute arbitrary code. A remote code execution vulnerability in MSHTML Engine can be exploited remotely via specially crafted file to execute arbitrary code.
Пораженные продукты	Microsoft Edge (EdgeHTML-based) Internet Explorer 9 Internet Explorer 11 ChakraCore
Решение	Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)
Первичный источник обнаружения	CVE-2020-1569 CVE-2020-1568 CVE-2020-1570 CVE-2020-1567 CVE-2020-1380 CVE-2020-1555
Оказываемое влияние ?	ACE [?]
Связанные продукты	Microsoft Internet Explorer Microsoft Edge ChakraCore
CVE-IDS	CVE-2020-15700.0Unknown CVE-2020-15670.0Unknown CVE-2020-15690.0Unknown CVE-2020-15680.0Unknown CVE-2020-13800.0Unknown CVE-2020-15550.0Unknown
KB list	4571692 4571694 4571729 4571687 4571709 4566782 4571703 4565349 4571736 4571741 4565351