[UPDATE] Google Chrome / Microsoft Edge: Multiple Vulnerabilities
A BSI Warn- und Informationsdienst (WID): Schwachstellen-Informationen (Security Advisories) ·
Admiralty grading (A–F · 1–6)
Source reliability
- A Completely reliable
- B Usually reliable
- C Fairly reliable
- D Not usually reliable
- E Unreliable
- F Cannot be judged
Information credibility
- 1 Confirmed
- 2 Probably true
- 3 Possibly true
- 4 Doubtful
- 5 Improbable
- 6 Cannot be judged
NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
Key insight
The BSI advisory bundles several browser vulnerabilities without CVE references, so concrete patch and exploitation details must be taken from the Google and Microsoft vendor advisories.
Description
The BSI warning and information service reports multiple vulnerabilities in the Google Chrome and Microsoft Edge browsers. The vulnerabilities are of varying nature and potentially allow an attacker to execute arbitrary code, escalate privileges, bypass security controls, disclose or manipulate data, trigger denial-of-service conditions, and conduct spoofing attacks. The advisory does not include specific CVE IDs, severity ratings, or evidence of active exploitation. Affected are installations of the named browsers in the vulnerable version ranges on supported operating systems. Assessment of exploitation risk and identification of affected versions must be based on the advisories published by Google and Microsoft.
Risk score
- cvss base
- 0.00
- kev bonus
- 0.00
- epss bonus
- 0.00
- poc bonus
- 0.00
- raw before weight
- 0.00
- industry weight
- 1.10
- freshness factor
- 1.00
- exploitability factor
- 1.00
- days old
- 0.00
- vendor mismatch penalty
- 0.00
Path: operational