Microsoft Edge browser (126.0.6478.57) Version security update advisory

Overview

 

Microsoft(https://www.microsoft.com) has released a security update that fixes vulnerabilities in products it has supplied. Users of affected products are advised to update to the latest version.

 

Affected Products

 

Microsoft Edge (Chromium-based) 126.0.6478.57 or below

 

Resolved Vulnerabilities

 

Memory Reuse After Freeing Vulnerability in the Audio function in Microsoft Edge (Chromium-based) (CVE-2024-5845)

Memory Reuse After Freeing in Browser UI Functionality in Microsoft Edge (Chromium-based) (CVE-2024-5842)

Memory Free and Reuse Vulnerability in Dawn Functionality in Microsoft Edge (Chromium-based) (CVE-2024-5831, CVE-2024-5832)

Improper Feature Implementation Vulnerability in the Dawn feature in Microsoft Edge (Chromium-based) (CVE-2024-5834)

Improper Functional Implementation Vulnerability in the DevTools feature in Microsoft Edge (Chromium-based) (CVE-2024-5836)

Improper Functional Implementation Vulnerability in the Downloads feature in Microsoft Edge (Chromium-based) (CVE-2024-5843)

Improper Functional Implementation Vulnerability in the Memory Allocator Function in Microsoft Edge (Chromium-based) (CVE-2024-5839)

Memory Reuse After Freeing Vulnerability in the PDFium Function in Microsoft Edge (Chromium-based) (CVE-2024-5846, CVE-2024-5847)

Policy Bypass in CORS vulnerability in Microsoft Edge (Chromium-based) (CVE-2024-5840)

Heap Buffer Overflow Vulnerability in the Tab Groups feature in Microsoft Edge (Chromium-based) (CVE-2024-5835)

Heap buffer overflow vulnerability in the Tab Strip feature in Microsoft Edge (Chromium-based) (CVE-2024-5844)

Memory Reuse After Free in V8 Functionality in Microsoft Edge (Chromium-based) (CVE-2024-5841)

Type Confusion Vulnerability in V8 Functionality in Microsoft Edge (Chromium-based) (CVE-2024-5837, CVE-2024-5833, CVE-2024-5838, CVE-2024-5830)

Low-grade spoofing vulnerability in Microsoft Edge (Chromium-based) (CVE-2024-30058)

Moderate spoofing vulnerability in Microsoft Edge (Chromium-based) (CVE-2024-38083)

Low-grade spoofing vulnerability in Microsoft Edge for iOS (CVE-2024-30057)

 

Vulnerability Patches

 

The following product-specific vulnerability patches were made available in the June 13, 2024. Update Please use the Windows Update feature to automatically install, or refer to the URLs in the product information below to download and install.

Microsoft Edge (Chromium-based) version 126.0.6478.57

https://msrc.microsoft.com/update-guide/