Multiple vulnerabilities in Microsoft Browser

Описание

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, obtain sensitive information.

Below is a complete list of vulnerabilities:

1. Type confusion vulnerability in V8 can be exploited to cause denial of service.
2. Heap buffer overflow vulnerability in Skia can be exploited to cause denial of service.
3. Use after free vulnerability in WebAudio can be exploited to cause denial of service or execute arbitrary code.
4. Out of bounds memory write vulnerability in V8 can be exploited to cause denial of service.
5. An information disclosure vulnerability in Microsoft Edge (Chromium-based) can be exploited remotely to obtain sensitive information.

Первичный источник обнаружения

• CVE-2024-7970
  CVE-2024-8198
  CVE-2024-8194
  CVE-2024-8362
  CVE-2024-38222
  

Эксплуатация

Public exploits exist for this vulnerability.

Связанные продукты

• Microsoft-Edge

Список CVE

• CVE-2024-8194
  critical
• CVE-2024-8198
  critical
• CVE-2024-8362
  critical
• CVE-2024-7970
  critical
• CVE-2024-38222
  high

Список KB

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com