Alert GCSA-25017 - Vulnerabilita' in Microsoft Edge
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ****************************************************************** Alert ID: GCSA-25017 Data: 7 Febbraio 2025 Titolo: Vulnerabilita' in Microsoft Edge ****************************************************************** :: Descrizione del problema Sono state identificate vulnerabilita' multiple in Microsoft Edge che potrebbero essere sfruttate da un attaccante remoto per rivelare informazioni sensibili, innescare condizioni di Denial of Service, spoofing ed eseguire codice arbitrario su un sistema che sia affetto. Maggiori informazioni sono disponibili alla sezione "Riferimenti". :: Software interessato Microsoft Edge Stable Channel versioni precedenti alla 133.0.3065.51 :: Impatto Denial of Service Remote Code Execution Information Disclosure Spoofing :: Soluzioni Aggiornare il software all'ultima versione disponibile L'aggiornamento avviene in modo automatico. E' possibile verificare la versione attualmente in uso scegliendo dal menu "Impostazioni e altro" (icona 3 punti verticali in alto a dx) la voce Guida e feedback -> Informazioni su Microsoft Edge :: Riferimenti Security Update Guide https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnotes-security#february-6-2025 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21404 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21342 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21267 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21279 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21253 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21283 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-21408 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-0444 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-0445 https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-0451 Mitre CVE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0444 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0445 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-0451 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21253 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21267 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21279 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21283 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21342 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21404 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-21408 GARR CERT Security Alert - subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iGsEAREIACsWIQTGpdiR5MqstacBGHbBnEyTZRJgQgUCZ6W8pg0cY2VydEBnYXJy Lml0AAoJEMGcTJNlEmBCtGUAn1mx68D+//Sn0t7iqBOTrvdhxrbfAJ92wNixHkjJ cwbC54snxGvZTtUi7Q== =FvVl -----END PGP SIGNATURE-----