Microsoft Edge Multiple Vulnerabilities

Multiple vulnerabilities were identified in Microsoft Edge.  A remote attacker could exploit some of these vulnerabilities to trigger denial of service condition, remote code execution and sensitive information disclosure on the targeted system.

Note:

For CVE-2024-0519, Out of bounds memory access in V8. The CVE-2024-0519 vulnerability is being exploited in the wild.

Impact

• Denial of Service
• Remote Code Execution
• Information Disclosure

System / Technologies affected

• Microsoft Edge (Stable) prior to 120.0.2210.144

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

• Update to Microsoft Edge (Stable) version 120.0.2210.144 or later

Vulnerability Identifier

• CVE-2024-0517
• CVE-2024-0518
• CVE-2024-0519

Source

• Microsoft Edge

Related Link

• https://learn.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security#january-17-2024
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0517
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0518
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0519