Msrc Microsoft Edge vulnerabilities

CVE-2021-37967 [MEDIUM] Chromium: CVE-2021-37967 Inappropriate implementation in Background Fetch API Chromium: CVE-2021-37967 Inappropriate implementation in Background Fetch API Description: This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. FAQ: What is the version information for this release? Microsoft Edge Version Date Released Based on Chromium Version 94.0.99

CVE-2021-37968 [MEDIUM] Chromium: CVE-2021-37968 Inappropriate implementation in Background Fetch API Chromium: CVE-2021-37968 Inappropriate implementation in Background Fetch API Description: This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. FAQ: What is the version information for this release? Microsoft Edge Version Date Released Based on Chromium Version 94.0.99

CVE-2021-30619 [MEDIUM] Chromium: CVE-2021-30619 UI Spoofing in Autofill Chromium: CVE-2021-30619 UI Spoofing in Autofill Description: This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. FAQ: What is the version information for this release? | Microsoft Edge Version | Date Released | Based on Chromium Version | | ----- | ----- | ----- | | 93.0.961.38 | 9/2/2021 | 93.0.4577

CVE-2021-26436 [MEDIUM] Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Microsoft Edge (Chromium-based): Microsoft Edge (Chromium-based) Microsoft: Microsoft Impact: Elevation of Privilege Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A Remediation: Release Notes

CVE-2021-37965 [MEDIUM] Chromium: CVE-2021-37965 Inappropriate implementation in Background Fetch API Chromium: CVE-2021-37965 Inappropriate implementation in Background Fetch API Description: This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. FAQ: What is the version information for this release? Microsoft Edge Version Date Released Based on Chromium Version 94.0.99

CVE-2021-30630 [MEDIUM] Chromium: CVE-2021-30630 Inappropriate implementation in Blink Chromium: CVE-2021-30630 Inappropriate implementation in Blink Description: This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. FAQ: What is the version information for this release? Microsoft Edge Version Date Released Based on Chromium Version 93.0.961.52 9/16/2021 93.0.4577.82 F

CVE-2021-38641 [MEDIUM] Microsoft Edge for Android Spoofing Vulnerability Microsoft Edge for Android Spoofing Vulnerability Microsoft Edge (Chromium-based): Microsoft Edge (Chromium-based) Microsoft: Microsoft Impact: Spoofing Exploit Status: Publicly Disclosed:No;Exploited:No;Latest Software Release:Exploitation Less Likely;Older Software Release:Exploitation Less Likely;DOS:N/A Remediation: Release Notes

CVE-2021-37963 [MEDIUM] Chromium: CVE-2021-37963 Side-channel information leakage in DevTools Chromium: CVE-2021-37963 Side-channel information leakage in DevTools Description: This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. FAQ: What is the version information for this release? Microsoft Edge Version Date Released Based on Chromium Version 94.0.992.31 9/24/2021 94

CVE-2021-37971 [MEDIUM] Chromium: CVE-2021-37971 Incorrect security UI in Web Browser UI Chromium: CVE-2021-37971 Incorrect security UI in Web Browser UI Description: This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. FAQ: What is the version information for this release? Microsoft Edge Version Date Released Based on Chromium Version 94.0.992.31 9/24/2021 94.0.4606.54

CVE-2021-37958 [MEDIUM] Chromium: CVE-2021-37958 Inappropriate implementation in Navigation Chromium: CVE-2021-37958 Inappropriate implementation in Navigation Description: This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. FAQ: What is the version information for this release? Microsoft Edge Version Date Released Based on Chromium Version 94.0.992.31 9/24/2021 94.0.

CVE-2021-30617 [MEDIUM] Chromium: CVE-2021-30617 Policy bypass in Blink Chromium: CVE-2021-30617 Policy bypass in Blink Description: This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. FAQ: What is the version information for this release? | Microsoft Edge Version | Date Released | Based on Chromium Version | | ----- | ----- | ----- | | 93.0.961.38 | 9/2/2021 | 93.0.4577.6

CVE-2021-37964 [LOW] Chromium: CVE-2021-37964 Inappropriate implementation in ChromeOS Networking Chromium: CVE-2021-37964 Inappropriate implementation in ChromeOS Networking Description: This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. FAQ: What is the version information for this release? Microsoft Edge Version Date Released Based on Chromium Version 94.0.992.31

CVE-2021-37960 Chromium: CVE-2021-37960 Inappropriate implementation in Blink graphics Chromium: CVE-2021-37960 Inappropriate implementation in Blink graphics Description: This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. FAQ: What is the version information for this release? Microsoft Edge Version Date Released Based on Chromium Version 94.0.992.31 9/24/2021 94.0.4

CVE-2021-30591 [HIGH] Chromium: CVE-2021-30591 Use after free in File System API Chromium: CVE-2021-30591 Use after free in File System API Description: This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. FAQ: What is the version information for this release? Microsoft Edge Version Date Released Based on Chromium Version 92.0.902.67 8/5/2021 92.0.4515.131 FAQ: Why is

CVE-2021-30590 [HIGH] Chromium: CVE-2021-30590 Heap buffer overflow in Bookmarks Chromium: CVE-2021-30590 Heap buffer overflow in Bookmarks Description: This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. FAQ: What is the version information for this release? Microsoft Edge Version Date Released Based on Chromium Version 92.0.902.67 8/5/2021 92.0.4515.131 FAQ: Why is

CVE-2021-30592 [HIGH] Chromium: CVE-2021-30592 Out of bounds write in Tab Groups Chromium: CVE-2021-30592 Out of bounds write in Tab Groups Description: This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. FAQ: What is the version information for this release? Microsoft Edge Version Date Released Based on Chromium Version 92.0.902.67 8/5/2021 92.0.4515.131 FAQ: Why is

CVE-2021-30593 [HIGH] Chromium: CVE-2021-30593 Out of bounds read in Tab Strip Chromium: CVE-2021-30593 Out of bounds read in Tab Strip Description: This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. FAQ: What is the version information for this release? Microsoft Edge Version Date Released Based on Chromium Version 92.0.902.67 8/5/2021 92.0.4515.131 FAQ: Why is thi

CVE-2021-30598 [HIGH] Chromium: CVE-2021-30598 Type Confusion in V8 Chromium: CVE-2021-30598 Type Confusion in V8 Description: This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. FAQ: Why is this Chrome CVE included in the Security Update Guide? The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-ba

CVE-2021-30603 [HIGH] Chromium: CVE-2021-30603 Race in WebAudio Chromium: CVE-2021-30603 Race in WebAudio Description: This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. FAQ: Why is this Chrome CVE included in the Security Update Guide? The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chromium-based). It

CVE-2021-30604 [HIGH] Chromium: CVE-2021-30604 Use after free in ANGLE Chromium: CVE-2021-30604 Use after free in ANGLE Description: This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. FAQ: Why is this Chrome CVE included in the Security Update Guide? The vulnerability assigned to this CVE is in Chromium Open Source Software (OSS) which is consumed by Microsoft Edge (Chrom