CVE-2017-8498

CVE-2017-8498 affects Microsoft Edge on Windows 10 1607/1703 and Windows Server 2016. When Edge runs JavaScript that uses XML DOM objects to detect installed browser extensions, an attacker can read data not intended to be disclosed. This CVE is separate from CVE-2017-8504. No exploitation, remed...

CVE-2017-8499

CVE-2017-8499 affects Microsoft Edge on Windows 10 (1703). The description and CNVD entry indicate a remote memory corruption vulnerability in Edge’s scripting engine that can allow arbitrary code execution in the context of the current user when Edge mishandles in-memory objects. Mitigation is v...

CVE-2017-8549

CVE-2017-8549 affects Microsoft Edge in Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. Description: Edge improperly handles objects in memory, enabling information disclosure that could help an attacker further compromise the system (Scripting Engine Memory Corruption). Connected do...

CVE-2017-8504

Microsoft Edge in Windows 10 1607 and 1703, and Windows Server 2016 allows an attacker to read the URL of a cross-origin request when the Microsoft Edge Fetch API incorrectly handles a filtered response type, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from...

CVE-2017-8548

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system when Microsoft Edge improperly handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID...

CVE-2017-8530

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page with malicious content when Microsoft Edge does not properly enforce same-origin policies, aka "Microsoft Edge Security Feature Bypass Vulnerability"...

CVE-2017-8521

Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fails to handle objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8499,...

Microsoft Internet Explorer and Microsoft Edge Information Disclosure Vulnerability (CNVD-2017-12102)

Microsoft Internet Explorer IE and Microsoft Edge are both web browsers developed by the American company Microsoft. The former is the default browser that came with operating systems before Windows 10, and the latter is the default browser that comes with the latest operating system, Windows 10...

Microsoft Edge Security Bypass Vulnerability (CNVD-2017-12105)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A security bypass vulnerability exists in Microsoft Edge. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized...

The vulnerability of Microsoft Chakra’s kernel in the Microsoft Edge browser allows a hacker to execute arbitrary code.

The vulnerability in the Microsoft Chakra kernel of the Microsoft Edge browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code when accessing objects in memory...

Microsoft Edge Remote Code Execution Vulnerability (CNVD-2017-12106)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A remote code execution vulnerability exists in Microsoft Edge. A remote attacker can exploit this vulnerability by tricking a user into viewing a specially craft...

Microsoft Edge Memory Corruption Vulnerability (CNVD-2017-12108)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A memory corruption vulnerability exists in Microsoft Edge. A remote attacker can exploit this vulnerability to execute arbitrary code or cause a denial of servic...

Microsoft Edge Information Disclosure Vulnerability (CNVD-2017-12107)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. An information disclosure vulnerability exists in Microsoft Edge. An attacker can exploit this vulnerability to obtain sensitive information by tricking users int...

Microsoft Edge Security Bypass Vulnerability (CNVD-2017-12104)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A security bypass vulnerability exists in Microsoft Edge. An attacker can exploit this vulnerability to bypass security restrictions and perform unauthorized...

Microsoft Internet Explorer and Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2017-12095)

Microsoft Internet Explorer IE and Microsoft Edge are both web browsers developed by the American company Microsoft. The former is the default browser that came with operating systems before Windows 10, and the latter is the default browser that comes with the latest operating system, Windows 10....

Microsoft Edge Information Disclosure Vulnerability (CNVD-2017-12109)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. An information disclosure vulnerability exists in Microsoft Edge. An attacker can exploit the vulnerability by tricking a user into viewing a specially crafted we...

Microsoft Internet Explorer and Microsoft Edge Remote Memory Corruption Vulnerability

Microsoft Internet Explorer IE and Microsoft Edge are both web browsers developed by the American company Microsoft. The former is the default browser that came with operating systems before Windows 10, and the latter is the default browser that comes with the latest operating system, Windows 10....

Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2017-12093)

Microsoft Edge is a web browser developed by Microsoft USA and is the default browser that comes with the Windows 10 operating system. A remote memory corruption vulnerability exists in Microsoft Edge. A remote attacker can exploit this vulnerability to execute arbitrary code or cause a denial of...

Microsoft Edge and Microsoft Internet Explorer Remote Memory Corruption Vulnerability

Microsoft Internet Explorer IE and Microsoft Edge are both web browsers developed by the American company Microsoft. The former is the default browser that came with operating systems before Windows 10, and the latter is the default browser that comes with the latest operating system, Windows 10....

Microsoft Windows Multiple Vulnerabilities (KB4022727)

This host is missing a critical security update according to Microsoft KB4022727 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...