Ziling Chen

Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.

Integer overflow or wraparound in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

A severe issue has been disclosed affecting Microsoft Edge, with reports of elevated activities targeting this flaw.

An issue involving type confusion, which occurs when a program uses a resource with a type that is incompatible with its actual type, allows an unauthorized attacker to execute arbitrary code over a network.

The issue was addressed with improved memory handling. Processing maliciously crafted web content may lead to an unexpected Safari crash.

Name of the Vulnerable Software and Affected Versions: Microsoft Edge (Chromium-based) (affected versions not specified) Description: The issue allows an unauthorized attacker to execute code over a network due to a 'type confusion' vulnerability in Microsoft Edge (Chromium-based), enabling remote code execution. This vulnerability permits remote attackers to execute arbitrary code and affect the system. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to an out of bounds write in Storage, allowing a remote attacker to perform an out of bounds memory write via a crafted HTML page. This could potentially impact the confidentiality, integrity, and availability of protected information.

The issue is related to a use after free in WebSQL, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This might enable the attacker to execute arbitrary code.

The issue is related to a use after free in WebSQL, which can be exploited by a remote attacker to potentially corrupt the heap via a crafted HTML page. This could allow the attacker to execute arbitrary code.