A double-free could have occurred in vpxcodecencinitmulti after a failed allocation when initializing the encoder for WebRTC. This could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 139, Firefox ESR < 115.24, and Firefox ESR < 128.11.
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability.
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Chromium: CVE-2024-8907 Insufficient data validation in Omnibox
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (HTML-based) Memory Corruption Vulnerability
Microsoft Edge for Android Spoofing Vulnerability
Chromium: CVE-2023-3735 Inappropriate implementation in Web API Permission Prompts
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Chromium: CVE-2024-0805 Inappropriate implementation in Downloads
Chromium: CVE-2024-0811 Inappropriate implementation in Extensions API
Chromium: CVE-2023-5485 Inappropriate implementation in Autofill
Chromium: CVE-2023-5858 Inappropriate implementation in WebApp Provider
Chromium: CVE-2024-0333 Insufficient data validation in Extensions
Chromium: CVE-2024-0814 Incorrect security UI in Payments
Chromium: CVE-2025-5066 Inappropriate implementation in Messages
Chromium: CVE-2025-5067 Inappropriate implementation in Tab Strip
Chromium: CVE-2025-5281 Inappropriate implementation in BFCache
Chromium: CVE-2025-5065 Inappropriate implementation in FileSystemAccess API
Chromium: CVE-2025-5064 Inappropriate implementation in Background Fetch API
Chromium: CVE-2025-4051 Insufficient data validation in DevTools
Chromium: CVE-2023-6512 Inappropriate implementation in Web Browser UI
Chromium: CVE-2024-0810 Insufficient policy enforcement in DevTools
An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory, aka 'Microsoft Browser Information Disclosure Vulnerability'.