CVE-2017-0233

An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Microsoft Edge Elevation of Privilege Vulnerability." This CVE ID is unique from CVE-2017-0241...

CVE-2017-0230

A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0224, CVE-2017-0228, CVE-2017-0229, CVE-2017-0234, CVE-2017-0235,...

CVE-2017-0229

CVE-2017-0229 is linked to a remote code execution in Microsoft Edge via memory-corrup­tion flaws in the scripting engine (Edge/Chakra) when handling in-memory objects. The connected advisories describe a ChakraCore/Edge RCE vulnerability with memory-corruption in the JavaScript engine, including...

CVE-2017-0241

An elevation of privilege vulnerability exists when Microsoft Edge renders a domain-less page in the URL, which could allow Microsoft Edge to perform actions in the context of the Intranet Zone and access functionality that is not typically available to the browser when browsing in the context of...

CVE-2017-0227

A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0221 and CVE-2017-0240...

CVE-2017-0221

Microsoft Edge Memory Corruption Vulnerability (CVE-2017-0221) affects the Edge scripting engines when rendering in-memory objects. The root cause is improper handling/access to objects in memory, enabling remote code execution in the user’s context. Public references state this CVE is distinct f...

Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2017-06586)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge does not properly access memory objects and is implemented with a remote memory corruption vulnerability that allows an attacker to execute arbitrary code in the current user context...

Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2017-06594)

Microsoft Edge is the web browser built into the Windows 10 version. A remote memory corruption vulnerability exists in the scripting engine presentation when Microsoft Edge handles in-memory objects, where an attacker could execute arbitrary code in the current user context...

Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2017-06590)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge does not properly access memory objects, and a remote memory corruption vulnerability exists in the JavaScript engine rendering implementation, where an attacker could execute arbitrary code in the current user...

Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2017-06593)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge suffers from a remote memory corruption vulnerability if a domain less web page is presented in a URI, which could allow an attacker to perform illegal operations in an intranet context and gain unauthorized acces...

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CVE-2017-0234)

A remote code execution vulnerability exists in the way that the Chakra JavaScript engine renders when handling objects in memory in Microsoft Edge. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. In a web-base...

Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2017-06591)

Microsoft Edge is the web browser built into the Windows 10 version. Microsoft Edge handles in-memory objects with a remote memory corruption vulnerability vulnerability in the Chakra JavaScript engine rendering that allows an attacker to corrupt memory and execute arbitrary code in the current...

Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2017-06596)

Microsoft Edge is the web browser built into the Windows 10 version. A remote memory corruption vulnerability exists in the Chakra JavaScript engine rendering when Microsoft Edge handles in-memory objects, where an attacker could execute arbitrary code in the current user context...

Microsoft Edge Scripting Engine Memory Corruption Vulnerability (CVE-2017-0236)

A remote code execution vulnerability exists in the way that the Chakra JavaScript engine renders when handling objects in memory in Microsoft Edge. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. In a web-base...

Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2017-06595)

Microsoft Edge is the web browser built into the Windows 10 version. A remote memory corruption vulnerability exists in the Chakra JavaScript engine rendering when Microsoft Edge handles in-memory objects, where an attacker could execute arbitrary code in the current user context...

Microsoft Edge Remote Memory Corruption Vulnerability (CNVD-2017-06588)

Microsoft Edge is the web browser built into the Windows 10 version. A remote memory corruption vulnerability exists in the scripting engine presentation when Microsoft Edge handles in-memory objects, where an attacker could execute arbitrary code in the current user context...

(Pwn2Own) Microsoft Edge AudioBuffer Use-After-Free Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Edge Browsers CSP Bypass

Microsoft Edge 40.15063 Version PoC: http://server.n0tr00t.com/test/edge3.php PiC: https://ws1.sinaimg.cn/large/c334041bgy1ffexx3u68oj20kq08rgma.jpg CSP RULE: header"Content-Security-Policy: default-src 'none' 'unsafe-inline';"; Bypass: function var x =...

(Pwn2Own) Microsoft Edge WriteClassesOfCategory DLL Planting Sandbox Escape Vulnerability

This vulnerability allows remote attackers to escape the AppContainer sandbox on vulnerable installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Microsoft Windows Monthly Rollup (KB4019215)

This host is missing a critical security update monthly rollup according to microsoft KB4019215. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...