CVE-2018-8564

A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge...

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2018-23213)

Edge is Microsoft's browser for Windows 10. Microsoft Edge suffers from a Chakra Scripting Engine memory corruption vulnerability. The vulnerability stems from a problem in the way the Chakra scripting engine handles objects in Microsoft Edge memory. A remote attacker could exploit the...

Microsoft Edge browser’s vulnerability, related to the execution of operations beyond the buffer in memory, allows attackers to execute arbitrary code.

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...

Microsoft Edge’s vulnerability, related to access control deficiencies, allows attackers to elevate their privileges and escape from the isolated software environment.

The vulnerability of Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges and escape from the isolated software environment of AppContainer...

Microsoft Edge’s vulnerability, related to access control deficiencies, allows attackers to elevate their privileges and escape from the isolated software environment.

The vulnerability of Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges and escape from the isolated software environment of AppContainer...

CVE-2018-8503

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8505, CVE-2018-8510,...

CVE-2018-8509

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8473...

CVE-2018-8473

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8509...

CVE-2018-8367

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8465, CVE-2018-8466,...

Microsoft Edge elevation of privilege vulnerability (CNVD-2018-26981)

Microsoft Windows 10 is a set of next-generation cross-platform operating systems released by Microsoft Corporation in the U.S. It is available for PCs and laptops, tablets, and cell phones, among other devices.Edge is one of the default browsers that comes with the system. An elevation of...

Microsoft Edge’s vulnerability, related to errors in handling cross-origin resource sharing requests, allows a perpetrator to circumvent restrictions on cross-origin resource sharing.

The vulnerability of Microsoft Edge relates to errors in handling cross-origin requests. Exploiting this vulnerability allows a malicious actor to circumvent Cross-Origin Resource Sharing CORS restrictions through a specially created web page...

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer, related to the execution of operations beyond the buffer in memory, allows an attacker to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in Microsoft Edge and Internet Explorer arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2018-12882)

Edge is Microsoft's browser for Windows 10. Microsoft Edge suffers from an information disclosure vulnerability. The vulnerability stems from Microsoft Edge failing to properly handle objects in memory. An attacker could exploit the vulnerability to obtain information that could further compromis...

Vulnerability of Microsoft Edge, Internet Explorer browsers, and the JavaScript scenario handler ChakraCore, caused by memory object handling errors, allowing attackers to execute arbitrary code.

The vulnerability of Microsoft Edge, Internet Explorer, and the JavaScript scenario handler ChakraCore arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

VMware SD-WAN Edge Command Injection Vulnerability

VMware SD-WAN Edge is a networking and security virtualization platform from VMware. The platform provides virtual machines with programmable and portable virtual networks deployed on common IP network hardware. A command injection vulnerability exists in VMware SD-WAN Edge version 2.x and versio...

Microsoft Edge Information Leakage Vulnerability (CNVD-2018-10478)

Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation.Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2016 is a set of server operating systems.Edge is one of the a default browser that comes with the system. An informatio...

The vulnerability of Microsoft Edge’s JavaScript script handlers allows a perpetrator to execute arbitrary code.

The vulnerability of Microsoft Edge’s JavaScript script handler arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted web page content...

Microsoft Edge’s vulnerability, related to improper handling of objects in memory, allows a malicious actor to trigger memory corruption and execute arbitrary code.

The vulnerability of Microsoft Edge relates to improper handling of objects in memory. Exploiting this vulnerability can allow a remote attacker to cause memory corruption and execute arbitrary code using a specially crafted web page...

The vulnerability in Microsoft Edge browsers arises from an operation that goes beyond the buffer boundaries in memory, allowing an attacker to execute arbitrary code.

The vulnerability of Microsoft Edge arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the current user...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2018-00533)

Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation USA. The former is an operating system for personal computers and the latter is a server operating system.Edge is one of the web browsers that comes with the system. An information disclosure vulnerability...