Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-78p9-q5qg-rg87

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka 'Microsoft Edge Information Disclosure Vulnerability'.

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka 'Microsoft Edge Information Disclosure Vulnerability'.

EPSS

Процентиль: 94%
0.14046
Средний

6.5 Medium

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 4.3
nvd
около 6 лет назад

An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. To exploit the vulnerability, in a web-based attack scenario, an attacker could host a website in an attempt to exploit the vulnerability. In addition, compromised websites and websites that accept or host user-provided content could contain specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action. For example, an attacker could trick a user into clicking a link that takes the user to the attacker's site. The update addresses the vulnerability by modifying how Microsoft Edge based on Edge HTML handles objects in memory.

CVSS3: 4.3
msrc
около 6 лет назад

Microsoft Edge based on Edge HTML Information Disclosure Vulnerability

CVSS3: 4.3
fstec
около 6 лет назад

Уязвимость браузера Microsoft Edge, связанная с ошибками обработки объектов в памяти, позволяющая нарушителю раскрыть защищаемую информацию

EPSS

Процентиль: 94%
0.14046
Средний

6.5 Medium

CVSS3

Дефекты

CWE-200