Microsoft Edge Multiple Vulnerabilities
Release Date: 29 Jan 2024
RISK: Medium Risk
TYPE: Clients - Browsers
Multiple vulnerabilities were identified in Microsoft Edge. A remote attacker could exploit some of these vulnerabilities to trigger elevation of privilege, sensitive information disclosure and spoofing on the targeted system.
Impact
- Information Disclosure
- Elevation of Privilege
- Spoofing
System / Technologies affected
- Microsoft Edge (Stable) prior to 121.0.2277.83
- Microsoft Edge (Extended Stable) prior to 120.0.2210.160
Solutions
Before installation of the software, please visit the software vendor web-site for more details.
Apply fixes issued by the vendor:
- Update to Microsoft Edge (Stable) version 121.0.2277.83 or later
- Update to Microsoft Edge (Extended Stable) version 120.0.2210.160 or later
Vulnerability Identifier
Source
Related Link
- https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#january-25-2024
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21326
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21336
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21382
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21383
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21385
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21387
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21388
沒有留言:
發佈留言