CVE-2018-0951

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0953, CVE-2018-0954...

CVE-2018-8123

CVE-2018-8123 affects Microsoft Edge (EdgeHTML) and is due to improper handling of objects in memory, causing information disclosure. The vulnerability could be exploited via web-based attacks (e.g., malicious site or embedded content) that tricks a user into visiting the attacker’s page. The doc...

CVE-2018-8137

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951,...

CVE-2018-0953

CVE-2018-0953 is a remote code execution vulnerability tied to how the Microsoft Edge scripting engine handles objects in memory, affecting Edge and ChakraCore. The issue is described as a memory-corruption vulnerability in the scripting engine, enabling remote code execution. Exploitation is evi...

CVE-2018-0945

CVE-2018-0945 is a remote code execution vulnerability in the Microsoft Edge scripting engine, arising from memory handling of objects and affecting Edge and ChakraCore. The connected advisories corroborate a ChakraCore/Edge memory-corruption issue described as a remote code execution vulnerabili...

CVE-2018-0943

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8130, CVE-2018-8133,...

CVE-2018-0943

The provided connected advisories identify a memory handling issue in the Chakra scripting engine (ChakraCore) that can lead to remote code execution or information disclosure in Microsoft Edge/IE. Description across sources consistently cites improper memory handling in Chakra objects as the roo...

CVE-2018-1025

CVE-2018-1025 is an information-disclosure vulnerability in affected Microsoft browsers, specifically Internet Explorer 11 and Microsoft Edge, caused by improper handling of objects in memory. The NVD entry states the issue leads to leakage of information but does not provide exploit details, aff...

EUVD-2018-11682

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8123...

CVE-2018-8179

CVE-2018-8179 is a remote code execution vulnerability in Microsoft Edge caused by improper access to objects in memory. Affected product: Microsoft Edge. Root cause: memory corruption from improper handling of in-memory objects. Impact: remote code execution with high severity (CVSSv3 base score...

CVE-2018-0953

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951,...

CVE-2018-8128

CVE-2018-8128 is described here as a remote code execution vulnerability in the Microsoft Edge scripting engine related to memory handling, affecting Edge and ChakraCore. The Connected documents (GHSA advisories) reiterate a ChakraCore/Edge memory corruption RCE issue, listing CVE-2018-8128 among...

CVE-2018-8178

Technical details, affected versions/limitations, and remediation for CVE-2018-8178 are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2018-8133

CVE-2018-8133 is a remote code execution vulnerability in the Chakra scripting engine’s memory handling, affecting Microsoft Edge and ChakraCore. The root cause is memory corruption within Chakra’s object handling, enabling an attacker to run arbitrary code in the context of the user. Multiple co...

CVE-2018-8139

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951,...

EUVD-2018-19847

A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge...

Microsoft Patches Two Zero-Day Flaws Under Active Attack

It's time to gear up for the latest May 2018 Patch Tuesday. Microsoft has today released security patches for a total of 67 vulnerabilities, including two zero-days that have actively been exploited in the wild by cybercriminals, and two publicly disclosed bugs. In brief, Microsoft is addressing ...

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2018-10736)

Microsoft Edge is a popular WEB browser. A memory corruption vulnerability exists in Microsoft Edge's handling of memory objects, which allows remote attackers to exploit a vulnerable special WEB page and trick the user into parsing it, which can crash the application or execute arbitrary code...

Microsoft Internet Explorer and Edge Remote Memory Corruption Vulnerability (CNVD-2018-10731)

Microsoft Windows Server 2012 and others are a series of operating systems released by Microsoft Corporation in the U.S. Edge and Internet Explorer IE are among the browsers that come with the systems. The former is the default browser that comes with the latest operating system, Windows 10, and...

Microsoft Edge Scripting Engine Remote Memory Corruption Vulnerability (CNVD-2018-10735)

Microsoft Edge is a popular WEB browser. A memory corruption vulnerability exists in Microsoft Edge's handling of memory objects, which allows remote attackers to exploit a vulnerable special WEB page and trick the user into parsing it, which can crash the application or execute arbitrary code...