Multiple vulnerabilities in Microsoft Browser

Açıklama

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, spoof user interface.

Below is a complete list of vulnerabilities:

1. Use after free vulnerability in Import can be exploited to cause denial of service or execute arbitrary code.
2. A spoofing vulnerability in Microsoft Edge (Chromium-based) can be exploited remotely to spoof user interface.
3. Validation of untrusted input vulnerability in Intents can be exploited to cause denial of service.
4. Validation of untrusted input vulnerability in Safe Browsing can be exploited to cause denial of service.
5. Use after free vulnerability in Media can be exploited to cause denial of service or execute arbitrary code.
6. Security UI vulnerability in Full Screen can be exploited to spoof user interface.
7. Use after free vulnerability in CSS can be exploited to cause denial of service or execute arbitrary code.
8. Type confusion vulnerability in Blink can be exploited to cause denial of service.
9. Policy enforcement vulnerability in Developer Tools can be exploited to cause denial of service.
10. Policy enforcement vulnerability in Custom Tabs can be exploited to cause denial of service.

Orijinal öneriler

• CVE-2022-3311

• CVE-2022-41035
• CVE-2022-3317
• CVE-2022-3316
• CVE-2022-3307
• CVE-2022-3313
• CVE-2022-3304
• CVE-2022-3315
• CVE-2022-3308
• CVE-2022-3310

Kötüye kullanma

Public exploits exist for this vulnerability.

İlgili ürünler

• Microsoft-Edge

CVE Listesi

• CVE-2022-3311
  high
• CVE-2022-3307
  critical
• CVE-2022-3308
  high
• CVE-2022-3317
  warning
• CVE-2022-3310
  high
• CVE-2022-3304
  critical
• CVE-2022-3315
  critical
• CVE-2022-3316
  warning
• CVE-2022-3313
  high
• CVE-2022-41035
  high

KB Listesi

Daha fazlasını okuyun

Bölgenizde yayılan güvenlik açıklarının istatistiklerini öğrenin statistics.securelist.com