Microsoft Edge Multiple Vulnerabilities (3169999)

This host is missing a critical security update according to Microsoft Bulletin MS16-085. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PT-2016-2494

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to the Chakra JavaScript engine in Microsoft Edge, which allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption...

PT-2016-2498

Name of the Vulnerable Software and Affected Versions Microsoft Edge versions prior to the fixed version Microsoft Internet Explorer versions 9 through 11 Description The issue is caused by a buffer overflow in the JScript 9, VBScript, and Chakra JavaScript engines used in Microsoft Edge and...

PT-2016-2497

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer 11 affected versions not specified Microsoft Edge affected versions not specified JScript 9 affected versions not specified VBScript affected versions not specified Chakra JavaScript engine affected versions not...

Microsoft Edge Memory Corruption Vulnerability (CNVD-2016-04193)

Microsoft Edge is a browser that comes with win10. A memory corruption vulnerability exists in the way the Chakra JavaScript engine used by Microsoft Edge is rendered, allowing remote attackers to exploit the vulnerability to build special WEB pages that users are tricked into parsing, which can...

CVE-2016-3214

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3199...

CVE-2016-3202

The Microsoft 1 Chakra JavaScript, 2 JScript, and 3 VBScript engines, as used in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruptio...

Memory corruption

The Microsoft 1 Chakra JavaScript, 2 JScript, and 3 VBScript engines, as used in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruptio...

CVE-2016-3199

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3214...

CVE-2016-3214

The CVE-2016-3214 entry concerns the Chakra JavaScript engine used by Microsoft Edge. The provided documents describe a memory corruption vulnerability in Chakra that can be triggered by a crafted web site, enabling remote code execution or a denial of service. The connected advisories and CVE re...

CVE-2016-3199

The Chakra JavaScript engine in Microsoft Edge is susceptible to a memory corruption vulnerability, also known as the "Scripting Engine Memory Corruption Vulnerability." A remote attacker can exploit this by using a specially crafted web page to trigger an operation that exceeds buffer boundaries...

CVE-2016-3214

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3199...

Microsoft Edge Chakra JavaScript Scripting Engine Memory Corruption Vulnerability (CNVD-2016-04074)

Microsoft Edge is a web browser developed by Microsoft and is the default browser that comes with the Windows 10 operating system.Chakra JavaScript engine is a JavaScript engine component used by Edge web browser. A memory vulnerability exists in the way the Chakra JavaScript engine used in...

CVE-2016-3202: Improper Input Validation

The Microsoft 1 Chakra JavaScript, 2 JScript, and 3 VBScript engines, as used in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruptio...

CVE-2016-3199: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3214...

CVE-2016-3214: Improper Restriction of Operations within the Bounds of a Memory Buffer

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3199...

PT-2016-2186

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site. This is due to a buffer overflow in the Chakra...

MS16-068: Cumulative Security Update for Microsoft Edge (3163656)

The version of Microsoft Edge installed on the remote Windows host is missing Cumulative Security Update 3163656. It is, therefore, affected by multiple vulnerabilities : - A security feature bypass vulnerability exists due to a failure to properly validate specially crafted documents. An...

PT-2016-3134

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted web site. This is caused by an out-of-bounds operation i...

Microsoft Edge JavaScript Engine Memory Corruption (MS16-052: CVE-2016-0186)

A memory corruption vulnerability exists in Microsoft Edge Chakra JavaScript Engine. This vulnerability is due to an improper validation in Array.unshift or Array.shift methods. A remote attacker could exploit this vulnerability by enticing the target user to open a specially crafted web page...