mickmick.net

Microsoft Edge Multiple Vulnerabilities

Release Date: 15 Nov 2024

RISK: Medium Risk

TYPE: Clients - Browsers

Multiple vulnerabilities were identified in Microsoft Edge. A remote attacker could exploit some of these vulnerabilities to trigger sensitive information disclosure, security restriction bypass and remote code execution on the targeted system.

---

Impact

• Security Restriction Bypass
• Remote Code Execution
• Information Disclosure

---

System / Technologies affected

• Microsoft Edge (Stable) version prior to 131.0.2903.48

---

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

• Update to Microsoft Edge (Stable) version 131.0.2903.48 or later

---

Vulnerability Identifier

• CVE-2024-11110
• CVE-2024-11111
• CVE-2024-11112
• CVE-2024-11113
• CVE-2024-11114
• CVE-2024-11115
• CVE-2024-11116
• CVE-2024-11117
• CVE-2024-49025

---

Source

• Microsoft Edge

---

Related Link

• https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#november-14-2024
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-11110
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-11111
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-11112
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-11113
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-11114
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-11115
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-11116
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-11117
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-49025