Microsoft Edge Multiple Vulnerabilities
Release Date: 15 Nov 2024
RISK: Medium Risk
TYPE: Clients - Browsers
Multiple vulnerabilities were identified in Microsoft Edge. A remote attacker could exploit some of these vulnerabilities to trigger sensitive information disclosure, security restriction bypass and remote code execution on the targeted system.
Impact
- Security Restriction Bypass
- Remote Code Execution
- Information Disclosure
System / Technologies affected
- Microsoft Edge (Stable) version prior to 131.0.2903.48
Solutions
Before installation of the software, please visit the software vendor web-site for more details.
Apply fixes issued by the vendor:
- Update to Microsoft Edge (Stable) version 131.0.2903.48 or later
Vulnerability Identifier
- CVE-2024-11110
- CVE-2024-11111
- CVE-2024-11112
- CVE-2024-11113
- CVE-2024-11114
- CVE-2024-11115
- CVE-2024-11116
- CVE-2024-11117
- CVE-2024-49025
Source
Related Link
- https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#november-14-2024
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-11110
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-11111
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-11112
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-11113
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-11114
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-11115
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-11116
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-11117
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49025
沒有留言:
發佈留言