Remote code execution

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542,...

CVE-2018-8545

An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge...

CVE-2018-8542

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8543,...

CVE-2018-8541

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8542, CVE-2018-8543,...

CVE-2018-8564

A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge...

CVE-2018-8556

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542,...

CVE-2018-8545

CVE-2018-8545 is an information-disclosure vulnerability in Microsoft Edge where cross-origin requests are mishandled, allowing an attacker to determine the origin of all webpages in the affected browser. Affected product: Microsoft Edge (Edge/ChakraCore-related components cited in multiple advis...

CVE-2018-8567

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain, aka "Microsoft Edge Elevation of Privilege Vulnerability." This affects...

CVE-2018-8555

Technical details for CVE-2018-8555 are not publicly available in the provided documents. Monitor for updates and follow the disclosure pages for concrete affected components, root cause, and fixes.

CVE-2018-8541

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8542, CVE-2018-8543,...

CVE-2018-8541

The CVE-2018-8541 issue is a Chakra scripting engine memory corruption vulnerability affecting Microsoft Edge and ChakraCore. Connected sources reiterate RCE via memory-handling of objects, with network exploitation and user interaction required per CVSSv3; no specific patch version or exploit de...

CVE-2018-8588

Technical details for CVE-2018-8588 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2018-8567

CVE-2018-8567 is an elevation of privilege in Microsoft Edge caused by insufficient enforcement of cross-domain policies. An attacker could craft a web-based scenario (hosted or compromised sites) to entice a user to visit content that exploits cross-domain information leakage to inject data into...

CVE-2018-8545

An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge...

CVE-2018-8556

CVE-2018-8556 is tied to a remote code execution flaw in the Chakra scripting engine’s handling of in-memory objects, affecting Microsoft Edge and ChakraCore. The root cause is memory corruption inside Chakra, leading to arbitrary code execution under remote conditions. The linked advisories (GHS...

CVE-2018-8542

CVE-2018-8542 describes a remote code execution vulnerability in the Chakra scripting engine memory handling that affects Microsoft Edge and ChakraCore. The flaw arises from how in-memory objects are processed, enabling arbitrary code execution on vulnerable systems. Exploitation details, affecte...

CVE-2018-8557

CVE-2018-8557 is a remote code execution in the Chakra scripting engine caused by memory corruption when handling objects, affecting Microsoft Edge and ChakraCore. Connected docs confirm the root cause (memory handling in Chakra) and affected components but do not provide versioned details, explo...

CVE-2018-8588

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542,...

CVE-2018-8555

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542,...

CVE-2018-8551

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542,...