Security
Headlines
HeadlinesLatestCVEs

Tag

#microsoft

CVE-2021-4056: Chromium: CVE-2021-4056: Type Confusion in loader

**What is the version information for this release?** Microsoft Edge Version Date Released Based on Chromium Version 96.0.1054.53 12/9/2021 96.0.4664.93

Microsoft Security Response Center
Open in Source
#microsoft#Microsoft Edge (Chromium-based)#Security Vulnerability
CVE-2021-4054: Chromium: CVE-2021-4054 Incorrect security UI in autofill

**What is the version information for this release?** Microsoft Edge Version Date Released Based on Chromium Version 96.0.1054.53 12/9/2021 96.0.4664.93

CVE-2021-4059: Chromium: CVE-2021-4059 Insufficient data validation in loader

**What is the version information for this release?** Microsoft Edge Version Date Released Based on Chromium Version 96.0.1054.53 12/9/2021 96.0.4664.93

CVE-2021-4063: Chromium: CVE-2021-4063 Use after free in developer tools

**What is the version information for this release?** Microsoft Edge Version Date Released Based on Chromium Version 96.0.1054.53 12/9/2021 96.0.4664.93

CVE-2021-4061: Chromium: CVE-2021-4061 Type Confusion in V8

**What is the version information for this release?** Microsoft Edge Version Date Released Based on Chromium Version 96.0.1054.53 12/9/2021 96.0.4664.93

CVE-2021-4062: Chromium: CVE-2021-4062 Heap buffer overflow in BFCache

**What is the version information for this release?** Microsoft Edge Version Date Released Based on Chromium Version 96.0.1054.53 12/9/2021 96.0.4664.93

CVE-2021-4058: Chromium: CVE-2021-4058 Heap buffer overflow in ANGLE

**What is the version information for this release?** Microsoft Edge Version Date Released Based on Chromium Version 96.0.1054.53 12/9/2021 96.0.4664.93

CVE-2021-4052: Chromium: CVE-2021-4052 Use after free in web apps

**What is the version information for this release?** Microsoft Edge Version Date Released Based on Chromium Version 96.0.1054.53 12/9/2021 96.0.4664.93

CVE-2021-38508: Security Vulnerabilities fixed in Thunderbird 91.3

By displaying a form validity message in the correct location at the same time as a permission prompt (such as for geolocation), the validity message could have obscured the prompt, resulting in the user potentially being tricked into granting the permission. This vulnerability affects Firefox < 94, Thunderbird < 91.3, and Firefox ESR < 91.3.

CVE-2021-43535: Security Vulnerabilities fixed in Thunderbird 91.3

A use-after-free could have occured when an HTTP2 session object was released on a different thread, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 93, Thunderbird < 91.3, and Firefox ESR < 91.3.