Information disclosure

Microsoft Edge allows remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Edge Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0009, CVE-2017-0017, CVE-2017-0065, and CVE-2017-0068...

CVE-2017-0065

CVE-2017-0065 concerns Microsoft Edge memory disclosure via a crafted web site, described as a remote information-collection vulnerability. Exploitation would allow an attacker to obtain sensitive information from the Edge process memory. The NVD entry lists a CVSSv3 base score of 4.3 (MEDIUM) wi...

KLA10968 Multiple vulnerabilities in Microsoft Edge

Multiple serious vulnerabilities have been found in Microsoft Edge. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information and bypass security restrictions. Below is a complete list of vulnerabilities: 1. An incorrect handling of...