Page 5 of 201 results (0.004 seconds)

CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0

19 Apr 2024 — Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Vulnerabilidad de omisión de característica de seguridad de Microsoft Edge (basada en Chromium) This vulnerability allows remote attackers to bypass the Mark-Of-The-Web security feature to execute arbitrary code on affected installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of .M... • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29991 • CWE-94: Improper Control of Generation of Code ('Code Injection') •

CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0

18 Apr 2024 — Microsoft Edge (Chromium-based) Information Disclosure Vulnerability Vulnerabilidad de divulgación de información de Microsoft Edge (basado en Chromium) • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29987 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor CWE-359: Exposure of Private Personal Information to an Unauthorized Actor •

CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0

18 Apr 2024 — Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability Vulnerabilidad de divulgación de información en Microsoft Edge para Android (basado en Chromium) • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29986 • CWE-359: Exposure of Private Personal Information to an Unauthorized Actor •

CVSS: 4.7EPSS: 0%CPEs: 2EXPL: 0

04 Apr 2024 — Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability Vulnerabilidad de suplantación de identidad de Webview2 en Microsoft Edge (basado en Chromium) • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29049 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 5.0EPSS: 4%CPEs: 2EXPL: 0

04 Apr 2024 — Microsoft Edge (Chromium-based) Spoofing Vulnerability Vulnerabilidad de suplantación de identidad en Microsoft Edge (basado en Chromium) • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-29981 • CWE-1021: Improper Restriction of Rendered UI Layers or Frames •

CVSS: 5.0EPSS: 1%CPEs: 2EXPL: 0

14 Mar 2024 — Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Vulnerabilidad de omisión de característica de seguridad de Microsoft Edge (basada en Chromium) • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26163 • CWE-693: Protection Mechanism Failure •

CVSS: 8.5EPSS: 2%CPEs: 1EXPL: 0

23 Feb 2024 — Microsoft Edge (Chromium-based) Information Disclosure Vulnerability Vulnerabilidad de divulgación de información de Microsoft Edge (basado en Chromium) • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-26192 • CWE-359: Exposure of Private Personal Information to an Unauthorized Actor •

CVSS: 4.8EPSS: 2%CPEs: 1EXPL: 0

23 Feb 2024 — Microsoft Edge (Chromium-based) Information Disclosure Vulnerability Vulnerabilidad de divulgación de información de Microsoft Edge (basado en Chromium) • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21423 • CWE-693: Protection Mechanism Failure •

CVSS: 8.3EPSS: 1%CPEs: 1EXPL: 0

02 Feb 2024 — Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Vulnerabilidad de ejecución remota de código de Microsoft Edge (basado en Chromium) • https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21399 • CWE-416: Use After Free •

CVSS: 6.5EPSS: 11%CPEs: 1EXPL: 1

30 Jan 2024 — Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Vulnerabilidad de elevación de privilegios en Microsoft Edge (basado en Chromium) • https://github.com/d0rb/CVE-2024-21388 • CWE-20: Improper Input Validation •