Marcin Towalski

The issue is related to a use after free in the media component, which can be exploited by a remote attacker using a crafted HTML page to potentially execute arbitrary code or exploit heap corruption.

The issue is related to a heap buffer overflow in the WebRTC technology implementation in Google Chrome and Microsoft Edge, which occurs when processing HTML content. This can allow a remote attacker to execute arbitrary code or cause a denial of service by convincing a user to visit a specially crafted webpage. The attacker can exploit heap corruption via a crafted HTML page.

The issue is related to a use after free vulnerability in the Selection API component of Google Chrome and Microsoft Edge browsers, which can be exploited by a remote attacker using a specially crafted HTML page, potentially leading to heap corruption or arbitrary code execution. The attacker must convince the user to visit a malicious website to exploit this issue.

The issue is related to a use after free in WebRTC, which allowed an attacker who convinced a user to visit a malicious website to potentially exploit heap corruption via a crafted HTML page. This could allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service using a specially crafted HTML page.

A use-after-free vulnerability exists in the way certain events are processed for `ImageLoader` objects of WebKit. This vulnerability can be exploited by a remote attacker, allowing them to access confidential data, compromise data integrity, and cause a denial of service. A specially crafted web page can lead to a potential information leak and further memory corruption. To trigger the vulnerability, a victim must be tricked into visiting a malicious webpage.

A use-after-free vulnerability exists in the way Webkit’s GraphicsContext handles certain events. This can lead to a potential information leak and further memory corruption when a victim visits a specially crafted web page. The vulnerability can be exploited by a remote attacker to access confidential data, compromise data integrity, and cause a denial of service.

The issue is related to an out of bounds read in the WebGL functionality, allowing a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. This could potentially impact a significant number of devices worldwide, although the exact number is not specified.

The issue is related to multiple memory corruption problems that have been addressed with improved memory handling. Processing maliciously crafted web content may lead to arbitrary code execution.

A use after free issue was addressed with improved memory management. Processing maliciously crafted web content may lead to arbitrary code execution.

A heap out of bounds write issue exists in the UI tag parsing functionality of the DICOM image format. This can be triggered by a specially crafted DICOM image, potentially allowing code execution. An attacker can exploit this by crafting a DICOM image to cause an offset beyond the bounds of a heap allocation to be written.

An exploitable out-of-bounds write issue exists in the `TIFdecodethunderscan` function of the `igcore19d.dll` library. This can be triggered by a specially crafted TIFF file, causing an out-of-bounds write and potentially resulting in remote code execution. An attacker must provide a malformed file to the victim to exploit this issue.

An information disclosure issue exists due to Microsoft Edge's improper handling of objects in memory. This could allow an attacker to obtain information that could be used to further compromise the user's system.

An information disclosure issue exists due to Microsoft Edge's improper handling of objects in memory. This could allow an attacker to obtain information that could be used to further compromise the user's system.

Name of the Vulnerable Software and Affected Versions: Microsoft Edge (affected versions not specified) Description: A remote code execution issue exists due to improper memory object access. This could lead to memory corruption, allowing an attacker to execute arbitrary code as the current user. If the user has administrative rights, the attacker could gain control of the system, enabling them to install programs, modify or delete data, or create new accounts with full rights. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

An information disclosure issue exists due to Microsoft Edge's improper handling of objects in memory. This could allow a remote attacker to gain unauthorized access to protected information, potentially obtaining details to further compromise the user's system.

Name of the Vulnerable Software and Affected Versions: Microsoft Edge versions in Microsoft Windows 10 1703 through 1709 Description: An information disclosure issue exists due to how Microsoft Edge handles objects in memory. This could allow an attacker to obtain information that could be used to further compromise the user's system. The issue is related to improper handling of objects in memory by Microsoft Edge. Recommendations: For Microsoft Edge in Microsoft Windows 10 1703 and 1709, at the moment, there is no information about a newer version that contains a fix for this issue.