3 ms·
https://www.cvedetails.com/product/32367/Microsoft-Edge.html?vendor_id=26 https://www.cvedetails.com/product/32367/Microsoft-Edge.html...
by based2 10y ago
https://www.cvedetails.com/product/32367/Microsoft-Edge.html?vendor_id=26 https://www.cvedetails.com/product/32367/Microsoft-Edge.html...
- dogma1138 10y agohttp://www.cvedetails.com/product/15031/Google-Chrome.html?vendor_id=1224 http://www.cvedetails.com/product/15031/Google-Chrome.html?v... And before you jump about the RCE, MSFT has a very broad definition for what counts as code execution, most importantly they count any browser systemic XSS as RCE while Google classifies it as an XSS, same goes with any type of memory corruption MSFT classifies it as RCE while Google classifies it as DOS unless there is a fully proven POC. Most of these vulnerabilities were also reported by MSFT and unlike Google MSFT submits CVE's for it's internally disclosed vulnerabilities while Google doesn't.
- bitmapbrother 10y agoCan you please cite a source that states that Google does not submit CVE's for their own internally found vulnerabilities? If Android is any indication Google certainly submits CVE's for their internally found vulnerabilities.