Microsoft Edge Multiple Vulnerabilities

Multiple vulnerabilities were identified in Microsoft Edge. A remote attacker could exploit some of these vulnerabilities to trigger security restriction bypass, data manipulation, remote code execution and denial of service condition on the targeted system.

Note:

For CVE-2023-6345, Integer overflow in Skia (open-source 2D graphics library), the vulnerability could result in remote code execution. Google is aware of a report that this issue may have been exploited in the wild.

Impact

• Remote Code Execution
• Denial of Service
• Data Manipulation
• Security Restriction Bypass

System / Technologies affected

• Microsoft Edge (Stable) prior to 119.0.2151.97
• Microsoft Edge (Extended Stable) prior to 118.0.2088.122

Solutions

Before installation of the software, please visit the software vendor web-site for more details.

Apply fixes issued by the vendor:

• Update to Microsoft Edge (Stable) version 119.0.2151.97 or later
• Update to Microsoft Edge (Extended Stable) version 118.0.2088.122 or later

Vulnerability Identifier

• CVE-2023-6345
• CVE-2023-6346
• CVE-2023-6347
• CVE-2023-6348
• CVE-2023-6350
• CVE-2023-6351

Source

• Microsoft Edge

Related Link

• https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#november-29-2023
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-6345
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-6346
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-6347
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-6348
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-6350
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-6351