mickmick.net

Microsoft Edge Multiple Vulnerabilities

Release Date: 6 Nov 2023

RISK: Medium Risk

TYPE: Clients - Browsers

Multiple vulnerabilities were identified in Microsoft Edge. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution and spoofing on the targeted system.

---

Impact

• Spoofing
• Remote Code Execution

---

System / Technologies affected

• Microsoft Edge prior to 119.0.2151.44

---

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

• Update to version 119.0.2151.44 or later

---

Vulnerability Identifier

• CVE-2023-36022
• CVE-2023-36029
• CVE-2023-36034

---

Source

• Microsoft Edge

---

Related Link

• https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#november-2-2023
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36022
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36029
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36034