Johnathan Norman

O problema está relacionado à falta de proteção para dados confidenciais no Microsoft Edge, o que poderia permitir que um invasor remoto divulgasse informações protegidas.

O problema está relacionado a um uso após liberação (use after free) no V8, o que poderia permitir que um invasor remoto explorasse potencialmente uma corrupção de heap. Isso pode ser feito por meio de uma página HTML especialmente criada.

The issue is related to insufficient policy enforcement in navigation, allowing a remote attacker to bypass site isolation. This can be achieved via a crafted HTML page, potentially leading to unauthorized access to protected information and disruption of its integrity and availability.

A remote code execution issue exists in the way the Chakra scripting engine handles objects in memory. This could allow an attacker to corrupt memory and execute arbitrary code in the context of the current user, potentially gaining the same user rights as the current user. If the current user has administrative rights, an attacker could take control of the affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

A remote code execution issue exists in the way the Chakra scripting engine handles objects in memory. This could allow an attacker to corrupt memory and execute arbitrary code in the context of the current user, potentially gaining the same user rights as the current user. If the current user has administrative rights, an attacker could take control of the affected system, install programs, view, change, or delete data, or create new accounts with full user rights.

The issue is related to a remote code execution problem in the way the scripting engine handles objects in memory. This could allow an attacker to corrupt memory and execute arbitrary code in the context of the current user. If the user has administrative rights, the attacker could take control of the system, install programs, view, change or delete data, or create new accounts with full user rights. The exploitation can be done through specially crafted web page content.

Name of the Vulnerable Software and Affected Versions: Microsoft Edge versions in Microsoft Windows 10 1703 through 1709 Description: An information disclosure issue exists due to how Microsoft Edge handles objects in memory. This could allow an attacker to obtain information that could be used to further compromise the user's system. The issue is related to improper handling of objects in memory by Microsoft Edge. Recommendations: For Microsoft Edge in Microsoft Windows 10 1703 and 1709, at the moment, there is no information about a newer version that contains a fix for this issue.

The issue is related to a remote code execution problem in the way the scripting engine handles objects in memory. This could allow an attacker to corrupt memory and execute arbitrary code in the context of the current user. If the user has administrative rights, the attacker could take control of the system, install programs, view, change or delete data, or create new accounts with full user rights.

Name of the Vulnerable Software and Affected Versions: Microsoft Edge (affected versions not specified) Description: An information disclosure issue exists due to the scripting engine's improper handling of objects in memory. This could allow an attacker to obtain information that could be used to further compromise the user's system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue allows remote attackers to cause a denial of service via a crafted TCP session on port 5631, resulting in a daemon crash.