- 169/2024
- High
Microsoft has released an updated Microsoft Edge Stable Channel (Version 125.0.2535.85) to address multiple vulnerabilities.
The addressed vulnerabilities could allow the remote attacker to execute arbitrary code, or overflow a buffer and gain access to the affected system by persuading the victim to visit a specially crafted website.
Sample of the addressed vulnerabilities:
Microsoft Edge Buffer Overflow Vulnerability (CVE-2024-5493):
- CVSS: 8.8
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: Required
- Consequences: Gain Access
Vulnerabilities
- CVE-2024-5493
- CVE-2024-5494
- CVE-2024-5495
- CVE-2024-5496
- CVE-2024-5497
- CVE-2024-5498
- CVE-2024-5499
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.