Microsoft Edge Luki w zabezpieczeniach

Oś czasu

Ostatni rok

Wersja

99.0.1150.3020
98.0.1108.4317
102.0.1245.414
104.0.1293.473
103.0.1264.373

Przeciwdziałanie

Official Fix880
Temporary Fix0
Workaround2
Unavailable1
Not Defined0

Wykorzystywanie

High2
Functional1
Proof-of-Concept149
Unproven28
Not Defined703

Wektor dostępu

Not Defined0
Physical1
Local5
Adjacent2
Network875

Uwierzytelnianie

Not Defined0
High16
Low11
None856

Interakcja z użytkownikiem

Not Defined0
Required816
None67

C3BM Index

Ostatni rok

CVSSv3 Base

≤10
≤20
≤31
≤423
≤5109
≤6413
≤7168
≤8158
≤99
≤102

CVSSv3 Temp

≤10
≤20
≤312
≤418
≤5115
≤6515
≤7115
≤897
≤910
≤101

VulDB

≤10
≤20
≤33
≤418
≤5113
≤637
≤7599
≤8102
≤99
≤102

NVD

≤10
≤20
≤31
≤416
≤597
≤629
≤757
≤8447
≤962
≤104

CNA

≤10
≤20
≤31
≤40
≤58
≤63
≤77
≤85
≤921
≤101

Sprzedawca

≤10
≤20
≤32
≤424
≤5432
≤610
≤750
≤823
≤915
≤102

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k0
<2k0
<5k1
<10k1
<25k4
<50k249
<100k578
≥100k50

Wykorzystaj dzisiaj

<1k122
<2k34
<5k83
<10k179
<25k462
<50k2
<100k1
≥100k0

Wykorzystaj wielkość rynku

Ostatni rok

🔴 CTI Zajęcia

Affected Versions (10): 11.0.10240.16384, 38.14393, 38.14393.1066, 98.0.1108.43, 99.0.1150.3, 102.0.1245.39, 102.0.1245.41, 103.0.1264.37, 103.0.1264.44, 104.0.1293.47

Link to Product Website: https://www.microsoft.com/

Typ oprogramowania: Web Browser

OpublikowanoBaseTempSłaby punkt0dayDzisiajWykPrzCTICVE
2023-04-284.34.2Microsoft Edge nieznana luka$25k-$100k$5k-$25kNot DefinedOfficial Fix1.32CVE-2023-29334
2023-04-076.26.0Microsoft Edge Redirect$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2023-24935
2023-04-074.34.2Microsoft Edge Remote Code Execution$25k-$100k$5k-$25kNot DefinedOfficial Fix0.23CVE-2023-28301
2023-04-074.34.1Microsoft Edge nieznana luka$25k-$100k$5k-$25kNot DefinedOfficial Fix0.03CVE-2023-28284
2023-03-256.36.0Microsoft Edge Remote Code Execution$25k-$100k$5k-$25kNot DefinedOfficial Fix0.09CVE-2023-28286
2023-03-254.54.3Microsoft Edge Local Privilege Escalation$5k-$25k$0-$5kNot DefinedOfficial Fix0.00CVE-2023-28261
2023-03-146.75.8Microsoft Edge Webview2 Redirect$25k-$100k$5k-$25kUnprovenOfficial Fix0.09CVE-2023-24892
2023-03-135.35.2Microsoft Edge Internals Remote Code Execution$25k-$100k$5k-$25kNot DefinedOfficial Fix0.03CVE-2023-1236
2023-03-136.36.1Microsoft Edge DevTools privilege escalation$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2023-1235
2023-03-135.35.2Microsoft Edge Intents Remote Code Execution$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2023-1234
2023-03-135.35.2Microsoft Edge Resource Timing Remote Code Execution$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2023-1233
2023-03-136.36.0Microsoft Edge Resource Timing Remote Code Execution$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2023-1232
2023-03-135.35.2Microsoft Edge Autofill Remote Code Execution$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2023-1231
2023-03-135.35.2Microsoft Edge WebApp Installs Remote Code Execution$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2023-1230
2023-03-135.35.2Microsoft Edge Permission Prompt privilege escalation$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2023-1229
2023-03-135.35.2Microsoft Edge Intents Remote Code Execution$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2023-1228
2023-03-135.35.2Microsoft Edge Web Payments API Remote Code Execution$25k-$100k$5k-$25kNot DefinedOfficial Fix0.22CVE-2023-1224
2023-03-135.35.2Microsoft Edge Autofill Remote Code Execution$25k-$100k$5k-$25kNot DefinedOfficial Fix0.03CVE-2023-1223
2023-03-137.57.4Microsoft Edge Web Audio API memory corruption$25k-$100k$5k-$25kNot DefinedOfficial Fix0.00CVE-2023-1222
2023-03-135.35.2Microsoft Edge Extensions API Remote Code Execution$25k-$100k$5k-$25kNot DefinedOfficial Fix0.04CVE-2023-1221
2023-03-137.57.4Microsoft Edge UMA memory corruption$25k-$100k$5k-$25kNot DefinedOfficial Fix0.03CVE-2023-1220
2023-03-137.57.4Microsoft Edge Metrics memory corruption$25k-$100k$5k-$25kNot DefinedOfficial Fix0.03CVE-2023-1219
2023-03-137.57.4Microsoft Edge WebRTC memory corruption$25k-$100k$5k-$25kNot DefinedOfficial Fix0.02CVE-2023-1218
2023-03-136.46.2Microsoft Edge Crash Reporting memory corruption$25k-$100k$5k-$25kNot DefinedOfficial Fix0.04CVE-2023-1217
2023-03-137.57.4Microsoft Edge DevTools memory corruption$25k-$100k$5k-$25kNot DefinedOfficial Fix0.33CVE-2023-1216

858 więcej wpisów nie jest pokazywanych

więcej wpisów autorstwa Microsoft

Interested in the pricing of exploits?

See the underground prices here!