Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2016-10941)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A memory corruption vulnerability exists in the rendering of the Microsoft Edge scripting engine, which stems from the program failing to properly handle objects ...

Microsoft Edge Spoofing Vulnerability (CNVD-2016-10948)

Microsoft Edge is a Web browser developed by the American company Microsoft Microsoft. Microsoft Edge has a spoofing vulnerability due to the program failing to properly analyze HTTP responses. An attacker exploits the vulnerability to trick users into visiting a constructed website...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2016-10949)

Microsoft Edge is a Web browser developed by the American company Microsoft Microsoft. An information disclosure vulnerability exists in Microsoft Edge's improper handling of memory objects, which could be exploited by an attacker to gain access to a user's My Documents folder and obtain sensitiv...

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2016-10954)

Microsoft Edge is a Web browser developed by the American company Microsoft Microsoft. A memory corruption vulnerability exists in the scripting engine implementation of Microsoft Edge's handling of in-memory objects, which can be exploited by an attacker via a specially crafted Web site to run...

Microsoft Internet Explorer and Edge Information Disclosure Vulnerability (CNVD-2016-10951)

Microsoft Internet Explorer is the default browser that comes with operating systems prior to Windows 10, and Microsoft Edge is the default browser that comes with the latest operating system, Windows 10. Microsoft Internet Explorer and Edge have an XSS filter implementation that allows remote...

November 8, 2016 — KB3198586 (OS Build 10586.679)

None None...

PT-2016-2973 · Microsoft · Chakra Javascript Engine +1

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is caused by a buffer overflow in the Chakra JavaScript engine of Microsoft Edge, allowing a remote attacker to execute arbitrary code or cause a denial of service memory...

Microsoft Says Russian Hackers Using Unpatched Windows Bug Disclosed by Google

Google's Threat Analysis Group publically disclosed on Monday a critical zero-day vulnerability in most versions of Windows just 10 days after privately disclosed both zero days to Microsoft and Adobe. While Adobe rushed an emergency patch for its Flash Player software on October 26, Microsoft ha...

Microsoft Internet Explorer and Edge Information Disclosure Vulnerability (CNVD-2016-09650)

Microsoft Internet Explorer is the default browser that comes with operating systems prior to Windows 10, and Microsoft Edge is the default browser that comes with the latest operating system, Windows 10. An information disclosure vulnerability exists in Microsoft Internet Explorer and Edge that...

CVE-2016-3391

Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow context-dependent attackers to discover credentials by leveraging access to a memory dump, aka "Microsoft Browser Information Disclosure Vulnerability."...

CVE-2016-3390

The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption Vulnerability...

CVE-2016-3388

Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privileges via unspecified vectors, aka "Microsoft Browser Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3387...

CVE-2016-3382

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, as demonstrated by the Chakra JavaScript engine, aka "Scripting Engine Memory Corruption...

Microsoft Edge Security Bypass Vulnerability

Microsoft Edge is the web browser built into the Windows 10 version. A security feature bypass vulnerability exists when the Edge content security policy fails to properly handle validation of certain specially designed documents. An attacker could trick a user into loading a page containing...

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2016-09402)

Microsoft Edge is the web browser built into the Windows 10 version. A remote memory corruption vulnerability exists in the Chakra JavaScript presentation when Edge handles memory objects. The vulnerability allows an attacker to corrupt memory, resulting in the execution of arbitrary code in the...

Microsoft Internet Explorer and Edge Elevation of Privilege Vulnerability

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A security vulnerability exists in Microsoft Internet Explorer and Edge that fails to properly protect private namespaces, which...

Microsoft Internet Explorer and Edge Remote Memory Corruption Vulnerability (CNVD-2016-09373)

Microsoft Internet Explorer and Edge are both web browsers developed by the American company Microsoft and are the default browsers that come with the Windows operating system. A remote memory corruption vulnerability exists in Microsoft Internet Explorer version 11 and Edge, which can be exploit...

October 11, 2016 — KB3192441 (OS Build 10586.633)

None None...

September 29, 2016 — KB3194496 (OS Builds 14393.222)

None None...

Microsoft Edge Adds App Guard Browser Security

Microsoft is bringing virtualization to its Edge browser with a security tool called Windows Defender Application Guard. The technology, announced this week at Microsoft’s 2016 Ignite conference in Atlanta, takes a virtualization-based approach to isolating browser-based attacks from the internet...