CVE-2018-8133

A remote code execution (RCE) vulnerability exists in the Chakra scripting engine used by Microsoft Edge and ChakraCore . The root cause is a type confusion resulting from the engine's assumption that the EntrySimpleObjectSlotGetter method has no side effects. Specifically, the method wraps retur...

CVE-2018-8177

The connected advisories collectively describe a ChakraCore memory-corruption vulnerability that can lead to remote code execution affecting ChakraCore and Microsoft Edge. The CVE-2018-8177 entry is linked to the broader family of Chakra memory–corruption flaws; however, the provided documents do...

CVE-2018-8130

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0943, CVE-2018-8133,...

CVE-2018-0951

CVE-2018-0951 describes a remote code execution vulnerability in the Microsoft Edge scripting engine’s handling of in-memory objects. Affected product: Microsoft Edge. Root cause: memory handling issue within the scripting engine leading to memory corruption. Impact as stated: potential remote co...

CVE-2018-0953

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951,...

CVE-2018-0943

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8130, CVE-2018-8133,...

CVE-2018-0954

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10. This CVE ...

CVE-2018-8137

CVE-2018-8137 is a remote code execution vulnerability in the Microsoft Edge scripting engine (ChakraCore) linked to memory handling of objects. The connected advisories confirm this vulnerability affects Edge and ChakraCore and classify it as remote code execution, but the documents do not provi...

CVE-2018-8139

CVE-2018-8139 is a remote code execution in the scripting engine used by Microsoft Edge and ChakraCore, caused by memory handling when processing objects. Affected: Edge and ChakraCore. Exploitation is evidenced by CIRCL/exploit-db references (e.g., exploit-DB ID 45012). The advisories confirm th...

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2018-10735)

Microsoft Edge is a popular WEB browser. A memory corruption vulnerability exists in Microsoft Edge's handling of memory objects, which allows remote attackers to exploit a vulnerable special WEB page and trick the user into parsing it, which can crash the application or execute arbitrary code...

Microsoft Internet Explorer Arbitrary Code Execution Vulnerability (CNVD-2018-10669)

Microsoft Windows Server 2012 and others are a series of operating systems released by Microsoft Corporation, U.S.A. Internet Explorer IE is one of the web browsers that comes with the Windows operating system. A remote code execution vulnerability exists in the way the scripting engine handles I...

Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability

Internet Explorer is a web browser from Microsoft. A scripting engine memory corruption vulnerability exists in Microsoft Internet Explorer. The vulnerability is caused due to a problem in the way the scripting engine handles objects in memory. A remote attacker could use this vulnerability to...

CVE-2018-0953: Out-of-bounds Write

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951,...

CVE-2018-0945: Out-of-bounds Write

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0946, CVE-2018-0951, CVE-2018-0953,...

CVE-2018-8133: Access of Resource Using Incompatible Type

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0943, CVE-2018-8130,...

CVE-2018-8128: Out-of-bounds Write

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951,...

Microsoft Edge Memory Corruption Vulnerability (CNVD-2018-10209)

Microsoft Windows 10 and Windows Server 2016 are both products of Microsoft Corporation.Microsoft Windows 10 is a set of operating systems for personal computers.Windows Server 2016 is a set of server operating systems.Edge is one of the a default browser that comes with the system. A remote code...

CVE-2018-8114: Out-of-bounds Write

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951,...

CVE-2018-8122: Out-of-bounds Write

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 11. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951,...

CVE-2018-8130: Out-of-bounds Write

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0943, CVE-2018-8133,...