Vulnerabilidades do Microsoft Edge Chromium

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Microsoft Edge Chromium: 106 registro(s), com versões afetadas e correções.
cpe:2.3:a:microsoft:edge_chromium

CVE-2023-6345 Crítica · 9.6 KEV Alta · 63 CWE-190 29/11/2023

Google Skia Integer Overflow Vulnerability

Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)

CVE-2023-5217 Alta · 8.8 KEV Alta · 62 Exploit público CWE-787 28/09/2023

Google Chromium libvpx Heap Buffer Overflow Vulnerability

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2023-4863 Alta · 8.8 KEV Alta · 62 Exploit público CWE-787 12/09/2023

Google Chromium WebP Heap-Based Buffer Overflow Vulnerability

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

CVE-2023-4762 Alta · 8.8 KEV Alta · 62 Exploit público CWE-843 05/09/2023

Google Chromium V8 Type Confusion Vulnerability

Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium security severity: High)

CVE-2022-4135 Crítica · 9.6 KEV Alta · 60 CWE-787 24/11/2022

Google Chromium GPU Heap Buffer Overflow Vulnerability

Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

CVE-2020-16009 Alta · 8.8 KEV Alta · 56 CWE-787 03/11/2020

Google Chromium V8 Type Confusion Vulnerability

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.