CVE-2018-8367

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8465, CVE-2018-8466,...

Microsoft Edge elevation of privilege vulnerability (CNVD-2018-26981)

Microsoft Windows 10 is a set of next-generation cross-platform operating systems released by Microsoft Corporation in the U.S. It is available for PCs and laptops, tablets, and cell phones, among other devices.Edge is one of the default browsers that comes with the system. An elevation of...

Microsoft Edge’s vulnerability, related to errors in handling cross-origin resource sharing requests, allows a perpetrator to circumvent restrictions on cross-origin resource sharing.

The vulnerability of Microsoft Edge relates to errors in handling cross-origin requests. Exploiting this vulnerability allows a malicious actor to circumvent Cross-Origin Resource Sharing CORS restrictions through a specially created web page...

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer, related to the execution of operations beyond the buffer in memory, allows an attacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2018-12882)

Edge is Microsoft's browser for Windows 10. Microsoft Edge suffers from an information disclosure vulnerability. The vulnerability stems from Microsoft Edge failing to properly handle objects in memory. An attacker could exploit the vulnerability to obtain information that could further compromis...

Vulnerability of Microsoft Edge, Internet Explorer browsers, and the JavaScript scenario handler ChakraCore, caused by memory object handling errors, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Edge, Internet Explorer, and the JavaScript scenario handler ChakraCore arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

VMware SD-WAN Edge Command Injection Vulnerability

VMware SD-WAN Edge is a networking and security virtualization platform from VMware. The platform provides virtual machines with programmable and portable virtual networks deployed on common IP network hardware. A command injection vulnerability exists in VMware SD-WAN Edge version 2.x and versio...

Microsoft Edge Information Leakage Vulnerability (CNVD-2018-10478)

Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation.Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2016 is a set of server operating systems.Edge is one of the a default browser that comes with the system. An informatio...

The vulnerability of Microsoft Edge’s JavaScript script handlers allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Edge’s JavaScript script handler arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted web page content...

Microsoft Edge’s vulnerability, related to improper handling of objects in memory, allows a malicious actor to trigger memory corruption and execute arbitrary code.

The vulnerability of Microsoft Edge relates to improper handling of objects in memory. Exploiting this vulnerability can allow a remote attacker to cause memory corruption and execute arbitrary code using a specially crafted web page...

The vulnerability in Microsoft Edge browsers arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2018-00533)

Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation USA. The former is an operating system for personal computers and the latter is a server operating system.Edge is one of the web browsers that comes with the system. An information disclosure vulnerability...

Microsoft Edge Elevation of Privilege Vulnerability (CNVD-2018-00520)

Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation USA. The former is an operating system for personal computers and the latter is a server operating system.Edge is one of the web browsers that comes with the system. Edge in Microsoft Windows suffers from an...

Microsoft Windows Edge and Microsoft ChakraCore Remote Code Execution Vulnerability (CNVD-2018-00330)

Microsoft Windows 10 and Windows Server 2016 are both products of the American company Microsoft. The former is a set of operating systems for personal computers, and the latter is a set of server operating systems.Edge is the default browser that comes with one of these systems.ChakraCore is the...

Microsoft Windows Edge and Internet Explorer and Microsoft ChakraCore Remote Code Execution Vulnerability

Microsoft Windows 7 SP1 and others are operating systems released by Microsoft Corporation in the U.S. Edge and Internet Explorer IE are among the browsers. The former is the default browser that comes with the latest operating system, Windows 10, and the latter is the default browser that comes...

CVE-2017-11888

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how Microsoft Edge handles objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability"...

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2017-30344)

Microsoft Windows 10 and Windows Server 2016 are both products of the American company Microsoft. The former is a set of operating systems for personal computers, and the latter is a set of server operating systems.Edge is the default browser that comes with one of these systems.ChakraCore is the...

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2017-30325)

Edge is Microsoft's browser for Windows 10, characterized as fast and secure. A memory corruption vulnerability exists in the way the Microsoft Edge scripting engine handles objects in memory, which can be exploited by an attacker to execute arbitrary code in the context of the current user or to...

VMware NSX-V Edge Denial of Service Vulnerability

VMware NSX-V Edge is a network and security virtualization platform from VMware. The platform provides virtual machines with full-service, programmable and portable virtual networks deployed on common IP network hardware. A denial of service vulnerability exists in VMware NSX-V Edge versions 6.3....

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2017-14448)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge fails to properly handle memory objects and is implemented with a remote memory corruption vulnerability that allows an attacker to execute arbitrary code in the current user context...