Microsoft Edge Multiple Vulnerabilities
Release Date: 18 Sep 2023
RISK: Extremely High Risk
TYPE: Clients - Browsers
Multiple vulnerabilities were identified in Microsoft Edge. A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, elevation of privilege, remote code execution and security restriction bypass on the targeted system.
Note:
For CVE-2023-4863, heap buffer overflow in WebP may lead to arbitrary code execution. Google is aware that an exploit for CVE-2023-4863 exists in the wild.
Impact
- Denial of Service
- Elevation of Privilege
- Remote Code Execution
- Security Restriction Bypass
System / Technologies affected
- Microsoft Edge (Stable) prior to 117.0.2045.31
- Microsoft Edge (Version 109) prior to 109.0.1518.140
Solutions
Before installation of the software, please visit the software vendor web-site for more details.
Apply fixes issued by the vendor:
- Update to Microsoft Edge (Stable) version 117.0.2045.31 or later
- Update to Microsoft Edge (Version 109) version 109.0.1518.140 or later
Vulnerability Identifier
- CVE-2023-4863
- CVE-2023-4900
- CVE-2023-4901
- CVE-2023-4902
- CVE-2023-4903
- CVE-2023-4904
- CVE-2023-4905
- CVE-2023-4906
- CVE-2023-4907
- CVE-2023-4908
- CVE-2023-4909
- CVE-2023-36562
- CVE-2023-36735
沒有留言:
發佈留言