Test ID:	1.3.6.1.4.1.25623.1.0.826639
Category:	Windows : Microsoft Bulletins
Title:	Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Nov 2022)
Summary:	This host is missing an important security; update according to Microsoft Edge (Chromium-Based) update.
Description:	Summary: This host is missing an important security update according to Microsoft Edge (Chromium-Based) update. Vulnerability Insight: Multiple flaws exist due to: - Type Confusion in V8. - Heap buffer overflow in Vulkan. - Use after free in Layout. - Heap buffer overflow in Media Galleries - Insufficient data validation in File System - Use after free in Extensions - Inappropriate implementation in Full screen mode - Insufficient data validation in Extensions. Vulnerability Impact: Successful exploitation will allow attackers to execute arbitrary code and leak memory on an affected system. Affected Software/OS: Microsoft Edge (Chromium-Based) prior to version 107.0.1418.24. Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-3652 https://chromereleases.googleblog.com/2022/10/stable-channel-update-for-desktop_25.html https://crbug.com/1369871 Common Vulnerability Exposure (CVE) ID: CVE-2022-3653 https://crbug.com/1354271 Common Vulnerability Exposure (CVE) ID: CVE-2022-3654 http://packetstormsecurity.com/files/170012/Chrome-blink-LocalFrameView-PerformLayout-Use-After-Free.html https://crbug.com/1365330 Common Vulnerability Exposure (CVE) ID: CVE-2022-3655 https://crbug.com/1343384 Common Vulnerability Exposure (CVE) ID: CVE-2022-3656 https://crbug.com/1345275 Common Vulnerability Exposure (CVE) ID: CVE-2022-3657 https://crbug.com/1351177 Common Vulnerability Exposure (CVE) ID: CVE-2022-3660 https://crbug.com/1327505 Common Vulnerability Exposure (CVE) ID: CVE-2022-3661 https://crbug.com/1350111
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.