11063 matches found
CVE-2020-1096
CVE-2020-1096: Microsoft Edge PDF Reader remote code execution vulnerability. It arises when Edge PDF Reader improperly handles objects in memory, allowing an attacker to run arbitrary code in the current user’s context via specially crafted PDF content. The vulnerability could grant the attacker...
CVE-2020-1096 Microsoft Edge PDF Remote Code Execution Vulnerability
...
CVE-2020-1059 Microsoft Edge Spoofing Vulnerability
...
CVE-2020-1059
CVE-2020-1059 describes a spoofing vulnerability in Microsoft Edge where improper parsing of HTTP content could allow an attacker to redirect a user to a malicious website. The Microsoft description specifies that exploitation requires the user to click a specially crafted URL (phish-like scenari...
CVE-2020-1056
CVE-2020-1056: Elevation of Privilege affecting Microsoft Edge. Root cause described as improper enforcement of cross-domain policies, enabling an attacker to access information from one domain and inject it into another domain. The connected Microsoft KB entries reference Edge-related security u...
CVE-2020-1056 Microsoft Edge Elevation of Privilege Vulnerability
...
CVE-2020-1037 Chakra Scripting Engine Memory Corruption Vulnerability
...
CVE-2020-1037
CVE-2020-1037 is a ChakraCore/Edge remote code execution vulnerability. The Chakra scripting engine mishandles in-memory objects, enabling an attacker to execute arbitrary code in the context of the user. Public sources (GHSA-8XV4-C7RQ-J577, NVD entry) describe it as a ChakraCore/Edge RCE without...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists in Microsoft Edge Chromium-based when the Feedback extension improperly validates input. An attacker who successfully exploited this vulnerability could write files to arbitrary locations and gain elevated privileges. The vulnerability by itself does...
KLA11782 PE vulnerability in Microsoft Browser
PE vulnerability was found in Microsoft Edge. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2020-1195 Related products Microsoft-Edge CVE list CVE-2020-1195 warning KB list Solution Install necessary updates from the Settings and more menu, that are...
Node.js third-party modules: [windows-edge] RCE via insecure command formatting
I would like to report a RCE issue in the windows-edge module. It allows to execute arbitrary commands remotely inside the victim's PC Module module name: windows-edge version: 1.0.1 npm page: https://www.npmjs.com/package/windows-edge Module Description Launch a new Microsoft Edge tab on Windows...
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, related to errors in memory object handling, allows attackers to execute arbitrary code.
The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Microsoft Edge PDF Reader Remote Code Execution Vulnerability
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A remote code execution vulnerability exists in Microsoft Edge PDF Reader that stems from the program failing to properly handle memory objects. An attacker could exploit the vulnerabilit...
Microsoft Edge and ChakraCore Remote Code Execution Vulnerability (CNVD-2020-61596)
Microsoft ChakraCore and Microsoft Edge are both products of Microsoft Corporation.ChakraCore is the core of an open-source Chakra JavaScript scripting engine used in the Edge browser, and is also available as a standalone JavaScript engine. Microsoft Edge is a web browser that comes with Windows...
Microsoft Edge Spoofing Vulnerability (CNVD-2020-61594)
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge, which stems from the program's failure to properly parse HTTP content. An attacker could exploit the vulnerability to lure users by...
May 12, 2020—KB4551853 (OS Build 17763.1217)
None None...
May 12, 2020—KB4556812 (OS Build 16299.1868)
None None...
Microsoft Edge Spoofing Vulnerability
A spoofing vulnerability exists when Microsoft Edge does not properly parse HTTP content. An attacker who successfully exploited this vulnerability could trick a user by redirecting the user to a specially crafted website. The specially crafted website could either spoof content or serve as a piv...
Chakra Scripting Engine Memory Corruption Vulnerability
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...