Test ID:	1.3.6.1.4.1.25623.1.0.817708
Category:	Windows : Microsoft Bulletins
Title:	Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Apr 2021)
Summary:	This host is missing an important security; update according to Microsoft Edge (Chromium-Based) updates.
Description:	Summary: This host is missing an important security update according to Microsoft Edge (Chromium-Based) updates. Vulnerability Insight: Multiple flaws exist due to: - An use after free error in Aura. - An out of bounds read error in IPC. - Multiple heap buffer overflow errors in TabStrip. - An use after free error in V8. - An use after free error in screen capture. Vulnerability Impact: Successful exploitation will allow an attacker to execute arbitrary code, gain access to sensitive information, bypass security restrictions, cause denial of service and may have other impacts. Affected Software/OS: Microsoft Edge (Chromium-Based) prior to version 89.0.4389.114. Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-21194 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/ https://security.gentoo.org/glsa/202104-08 https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_30.html https://crbug.com/1181228 Common Vulnerability Exposure (CVE) ID: CVE-2021-21195 https://crbug.com/1182647 Common Vulnerability Exposure (CVE) ID: CVE-2021-21196 https://crbug.com/1175992 Common Vulnerability Exposure (CVE) ID: CVE-2021-21197 https://crbug.com/1173903 Common Vulnerability Exposure (CVE) ID: CVE-2021-21198 http://packetstormsecurity.com/files/162973/Chrome-Legacy-ipc-Message-Passed-Via-Shared-Memory.html https://crbug.com/1184399 Common Vulnerability Exposure (CVE) ID: CVE-2021-21199 https://crbug.com/1179635
Copyright	Copyright (C) 2021 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.