Nan Wang

Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

A severe issue has been disclosed affecting Microsoft Edge, with reports of elevated activities targeting this flaw.

An issue involving type confusion, which occurs when a program uses a resource with a type that is incompatible with its actual type, allows an unauthorized attacker to execute arbitrary code over a network.

A path handling issue exists where processing maliciously crafted web content may disclose sensitive user information. This is caused by insufficient validation during path processing.

A use-after-free issue, which occurs when a program continues to use a pointer after it has been freed, was addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Processing maliciously crafted web content may lead to an unexpected Safari crash due to a stack overflow, which occurs when a program exceeds its allocated stack memory. This issue was addressed by improving input validation.

Incorrect boundary conditions exist in the WebRTC: Networking component.

A use-after-free issue exists in the WebRTC component. Use-after-free occurs when an application continues to use a pointer after it has been freed, which can lead to crashes or arbitrary code execution.

Incorrect boundary conditions exist in the WebRTC component, which is a framework that enables real-time communication (voice, video, and data) within web browsers.

The software contains an issue related to memory handling. Processing specially crafted web content may cause the software to unexpectedly crash.

The software contains a flaw due to improper state management. Processing specially crafted web content can cause the application to unexpectedly crash.

A use-after-free issue exists in the JavaScript Engine component. This can potentially allow for unexpected behavior or code execution.

A flaw exists due to improper memory handling when processing specially designed web content. This can result in an unexpected application crash.