QID 376666

Date Published: 2022-06-15

QID 376666: Microsoft Edge Based on Chromium Prior to 102.0.1245.41 Multiple Vulnerabilities

EdgeChromium has released security update for Mac and Windows to fix the vulnerabilities.
QID Detection Logic: (Authenticated).
It checks package versions to check for the vulnerable packages.

Successful exploitation of this vulnerability could lead to a security breach or could affect integrity, availability, and confidentiality.

CVSS V3 rated as Critical - 8.6 severity.

CVSS V2 rated as Medium - 5.4 severity.

Solution

Customers are advised to upgrade to version 102.0.1245.41 or later

Vendor References

CVE-2022-2007 - msrc.microsoft.com/update-guide/vulnerability/CVE-2022-2007
CVE-2022-2008 - msrc.microsoft.com/update-guide/vulnerability/CVE-2022-2008
CVE-2022-2010 - msrc.microsoft.com/update-guide/vulnerability/CVE-2022-2010
CVE-2022-2011 - msrc.microsoft.com/update-guide/vulnerability/CVE-2022-2011

CVEs related to QID 376666

CVE-2022-2011 | CVE-2022-2010 | CVE-2022-2008 | CVE-2022-2007 |

Software Advisories

Advisory ID	Software	Component	Link
CVE-2022-2007			msrc.microsoft.com/update-guide/vulnerability/CVE-2022-2007
CVE-2022-2008			msrc.microsoft.com/update-guide/vulnerability/CVE-2022-2008
CVE-2022-2010			msrc.microsoft.com/update-guide/vulnerability/CVE-2022-2010
CVE-2022-2011			msrc.microsoft.com/update-guide/vulnerability/CVE-2022-2011

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].