2024年1月20日星期六

Microsoft Edge Multiple Vulnerabilities

Release Date: 18 Jan 2024

RISK: Extremely High Risk

TYPE: Clients - Browsers

TYPE: Browsers

Multiple vulnerabilities were identified in Microsoft Edge.  A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, remote code execution and sensitive information disclosure on the targeted system.

 

Note:

For CVE-2024-0519, Out of bounds memory access in V8. The CVE-2024-0519 vulnerability is being exploited in the wild.


Impact

  • Denial of Service
  • Remote Code Execution
  • Information Disclosure

System / Technologies affected

  • Microsoft Edge (Stable) prior to 120.0.2210.144

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

  • Update to Microsoft Edge (Stable) version 120.0.2210.144 or later

Vulnerability Identifier


Source


Related Link

沒有留言:

發佈留言

Microsoft Edge 遠端執行程式碼漏洞

Microsoft Edge 遠端執行程式碼漏洞 發佈日期: 2025年12月19日 風險: 中度風險 類型: 用戶端 - 瀏覽器 於微軟 Ed...