8
CVE-2021-26411 - Security Update Guide - Microsoft - Internet Explorer Memory Co...
source link: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-26411
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
Internet Explorer Memory Corruption Vulnerability
-
- Customer Guidance
-
-
Welcome to the new and improved Security Update Guide! We'd love your feedback. Please click here to share your thoughts or email us at [email protected]. Thank you!
Security Vulnerability
Released: Mar 9, 2021
Assigning CNA:
Microsoft
CVSS:3.0 8.8 / 7.9
Base score metrics(8)
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Temporal score metrics(3)
Exploit Code Maturity
Remediation Level
Report Confidence
Please see Common Vulnerability Scoring System for more information on the definition of these metrics.
Exploitability
The following table provides an exploitability assessment for this vulnerability at the time of original publication.
Publicly Disclosed
Exploited
Exploitability Assessment
Exploitation Detected
How could an attacker exploit the vulnerability?
An attacker could host a specially crafted website designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website. The attacker could also take advantage of compromised websites, or websites that accept or host user-provided content or advertisements, by adding specially crafted content that could exploit the vulnerability. However, in all cases an attacker would have no way to force a user to view the attacker-controlled content. Instead, an attacker would have to convince a user to take action, typically by an enticement in an email or instant message, or by getting the user to open an attachment sent through email.
Acknowledgements
- yangkang(@dnpushme) & huangyi(@C0rk1_H)
Security Updates
To determine the support lifecycle for your software, see the Microsoft Support Lifecycle.
Release date
Product
Platform
Impact
Severity
Article
Download
Details
Mar 9, 2021
Microsoft Edge (EdgeHTML-based)
Windows Server 2016
Remote Code Execution
Critical
Mar 9, 2021
Microsoft Edge (EdgeHTML-based)
Windows 10 Version 1607 for x64-based Systems
Remote Code Execution
Critical
Mar 9, 2021
Microsoft Edge (EdgeHTML-based)
Windows 10 Version 1607 for 32-bit Systems
Remote Code Execution
Critical
Mar 9, 2021
Microsoft Edge (EdgeHTML-based)
Windows 10 for x64-based Systems
Remote Code Execution
Critical
Mar 9, 2021
Microsoft Edge (EdgeHTML-based)
Windows 10 for 32-bit Systems
Remote Code Execution
Critical
Mar 9, 2021
Microsoft Edge (EdgeHTML-based)
Windows 10 Version 20H2 for ARM64-based Systems
Remote Code Execution
Critical
Mar 9, 2021
Microsoft Edge (EdgeHTML-based)
Windows 10 Version 20H2 for 32-bit Systems
Remote Code Execution
Critical
Mar 9, 2021
Microsoft Edge (EdgeHTML-based)
Windows 10 Version 20H2 for x64-based Systems
Remote Code Execution
Critical
Mar 9, 2021
Microsoft Edge (EdgeHTML-based)
Windows 10 Version 2004 for x64-based Systems
Remote Code Execution
Critical
Mar 9, 2021
Microsoft Edge (EdgeHTML-based)
Windows 10 Version 2004 for ARM64-based Systems
Remote Code Execution
Critical
Mar 9, 2021
Microsoft Edge (EdgeHTML-based)
Windows 10 Version 2004 for 32-bit Systems
Remote Code Execution
Critical
Mar 9, 2021
Microsoft Edge (EdgeHTML-based)
Windows 10 Version 1903 for ARM64-based Systems
Remote Code Execution
Critical
Mar 9, 2021
Microsoft Edge (EdgeHTML-based)
Windows 10 Version 1903 for x64-based Systems
Remote Code Execution
Critical
Mar 9, 2021
Microsoft Edge (EdgeHTML-based)
Windows 10 Version 1909 for ARM64-based Systems
Remote Code Execution
Critical
Mar 9, 2021
Microsoft Edge (EdgeHTML-based)
Windows 10 Version 1909 for x64-based Systems
Remote Code Execution
Critical
Mar 9, 2021
Microsoft Edge (EdgeHTML-based)
Windows 10 Version 1909 for 32-bit Systems
Remote Code Execution
Critical
Mar 9, 2021
Microsoft Edge (EdgeHTML-based)
Windows Server 2019
Remote Code Execution
Critical
Mar 9, 2021
Microsoft Edge (EdgeHTML-based)
Windows 10 Version 1809 for ARM64-based Systems
Remote Code Execution
Critical
Mar 9, 2021
Microsoft Edge (EdgeHTML-based)
Windows 10 Version 1809 for x64-based Systems
Remote Code Execution
Critical
Mar 9, 2021
Microsoft Edge (EdgeHTML-based)
Windows 10 Version 1809 for 32-bit Systems
Remote Code Execution
Critical
Loaded all 56 rows
Disclaimer
The information provided in the Microsoft Knowledge Base is provided "as is" without warranty of any kind. Microsoft disclaims all warranties, either express or implied, including the warranties of merchantability and fitness for a particular purpose. In no event shall Microsoft Corporation or its suppliers be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Microsoft Corporation or its suppliers have been advised of the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental damages so the foregoing limitation may not apply.
Revisions
Version
Revision Date
Description
Mar 9, 2021
Information published.
Recommend
About Joyk
Aggregate valuable and interesting links.
Joyk means Joy of geeK