CVE-2018-8473

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8509...

CVE-2018-8513

CVE-2018-8513 concerns a remote code execution vulnerability in the Chakra scripting engine’s handling of in-memory objects, affecting Microsoft Edge and ChakraCore. The root cause is memory handling in Chakra’s object model that can be exploited to execute arbitrary code. The CVSS assessment in ...

CVE-2018-8511

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8503, CVE-2018-8505,...

CVE-2018-8510

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8503, CVE-2018-8505,...

CVE-2018-8473

CVE-2018-8473 is a remote code execution vulnerability affecting Microsoft Edge (and related ChakraCore) due to improper memory object access. Multiple connected sources corroborate a memory corruption issue in Edge and in the ChakraCore scripting engine, enabling an attacker to run arbitrary cod...

CVE-2018-8513

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8503, CVE-2018-8505,...

CVE-2018-8503

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8505, CVE-2018-8510,...

CVE-2018-8511

Technical details for CVE-2018-8511 are not publicly available in the provided documents. Monitor for updates.

CVE-2018-8509

CVE-2018-8509 pertains to Microsoft Edge memory corruption leading to remote code execution when Edge improperly accesses objects in memory. Connected documents also reference a related CVE-2018-8473 that affects Edge and ChakraCore with the same memory-access weakness. The vulnerability enables ...

CVE-2018-8510

Technical details about CVE-2018-8510 are not provided in the supplied documents. Public information in connected sources references ChakraCore/RCE in Chakra but does not specify this CVE. Monitor for updates.

CVE-2018-8530

Technical details about CVE-2018-8530 are not publicly provided in the supplied documents. No concrete information on affected versions, root cause, exploitation, or remediation is present. Monitor for updates from official advisories.

CVE-2018-8530

A security feature bypass vulnerability exists when Microsoft Edge improperly handles requests of different origins, aka "Microsoft Edge Security Feature Bypass Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8512...

CVE-2018-8505

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8503, CVE-2018-8510,...

Microsoft Edge Chakra Scripting Engine Remote Memory Corruption Vulnerability

Edge is the default browser that comes with Microsoft's operating systems.ChakraCore is the core of an open source JavaScript engine used in Edge, and can also be used as a standalone JavaScript engine. A remote memory corruption vulnerability exists in the Microsoft Edge Chakra Scripting Engine...

Microsoft Edge Chakra JIT - BailOutOnInvalidatedArrayHeadSegment Check Bypass Exploit

Exploit for windows platform in category dos / poc / The BailOutOnInvalidatedArrayHeadSegment check uses the JavascriptArray::GetArrayForArrayOrObjectWithArray method to check whether the given object is an array. If it's not an array, it will decide to skip the check which means that no bailout...

Microsoft Edge Chakra JIT - Type Confusion Exploit

Exploit for windows platform in category dos / poc / The switch statement only handles Js::TypeIdsArray but not Js::TypeIdsNativeIntArray and Js::TypeIdsNativeFloatArray. So for example, a native float array can be considered as of type ObjectType::Object under certain circumstances where...

Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2018-21211)

Edge is the default browser that comes with Microsoft's operating systems. A remote memory corruption vulnerability exists in Microsoft Edge. An attacker can exploit this vulnerability to execute arbitrary code in the context of the currently logged in user. A failed attack would result in a deni...

Microsoft Edge Hazardous URI Insufficient UI Warning Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page and perform a UI action. There are multiple issues with the way the...

Microsoft Windows Multiple Vulnerabilities (KB4462917)

This host is missing a critical security update according to Microsoft KB4462917 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4462919)

This host is missing a critical security update according to Microsoft KB4462919 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...