Remote Code Execution (RCE)

Microsoft ChakraCore is vulnerable to remote code execution. This is due a lack of validation for return objects without any properties in AsmJs.cpp, which would allow a remote attacker to execute arbitrary code in the context of the authenticated user. This CVE ID is different from CVE-2017-0015...

CVE-2017-0132

CVE-2017-0134 is described in Connected doc CPAI-2018-0053 as a remote code execution vulnerability in Microsoft Edge’s scripting engine memory handling. The issue arises from how objects are rendered in memory, allowing an attacker to run arbitrary code in the context of the current user by conv...

KLA10968 Multiple vulnerabilities in Microsoft Edge

Multiple serious vulnerabilities have been found in Microsoft Edge. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information and bypass security restrictions. Below is a complete list of vulnerabilities: 1. An incorrect handling of...