EUVD-2022-4359

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, CVE-2018-8359,...

CVE-2018-8358

CVE-2018-8358 is a security feature bypass in Microsoft Edge caused by improper handling of redirect requests, allowing bypass of CORS redirect restrictions and potential data leakage through redirects to attacker‑controlled destinations. Public references (NVD/MSRC) confirm Edge as affected and ...

CVE-2018-8388

CVE-2018-8388: Technical details are not provided in the supplied documents; no explicit affected product/version/root-cause details are stated here.

CVE-2018-8388

A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8383...

CVE-2018-8403

CVE-2018-8403 is a remote code execution vulnerability in how Microsoft browsers access objects in memory (the Microsoft Browser Memory Corruption Vulnerability). Affected products include Internet Explorer 11, Microsoft Edge, and Internet Explorer 10. Root cause is memory corruption when handlin...

CVE-2018-8390

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8353, CVE-2018-8355, CVE-2018-8359,...

CVE-2018-8355

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8353,...

CVE-2018-8351

An information disclosure vulnerability exists when affected Microsoft browsers improperly allow cross-frame interaction, aka "Microsoft Browser Information Disclosure Vulnerability." This affects Internet Explorer 11, Microsoft Edge, Internet Explorer 10...

CVE-2018-8380

CVE-2018-8380 describes a remote code execution in the Chakra scripting engine used by Microsoft Edge and ChakraCore. The root cause is a memory handling issue with objects in memory, leading to potential code execution. Affected products/components are Microsoft Edge and ChakraCore; the CVSS3 ve...

CVE-2018-8383

A spoofing vulnerability exists when Microsoft Edge does not properly parse HTTP content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8388...

CVE-2018-8384

CVE-2018-8384 describes a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge/ChakraCore, caused by memory handling of objects that can lead to memory corruption. The issue is labeled as a ChakraCore/Edge memory corruption vulnerability with a high-severity i...

CVE-2018-8372

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8353,...

CVE-2018-8370

CVE-2018-8370 is an information-disclosure vulnerability in the Microsoft Edge/WebAudio Library, where improper handling of audio requests can allow reading of privileged data across trust boundaries. Affected: Microsoft Edge (WebAudio Library component). Root cause: failure to properly handle au...

Microsoft Edge Security Feature Bypass Vulnerability (CNVD-2018-18046)

Edge is Microsoft's browser for Windows 10. A security feature bypass vulnerability exists in Microsoft Edge that stems from the program failing to properly handle redirection requests. A remote attacker could use the vulnerability to bypass the Cross-Origin Resource Sharing CORS redirection...

Microsoft Edge Spoofing Vulnerability (CNVD-2018-18474)

Microsoft Edge is a Web browser developed by the American company Microsoft Microsoft. A spoofing vulnerability exists in Microsoft Edge. The vulnerability stems from the program not properly parsing HTTP content. A remote attacker could exploit the vulnerability by leveraging a specially crafted...

Microsoft Windows Multiple Vulnerabilities (KB4343900)

This host is missing a critical security update according to Microsoft KB4343900 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB4343885)

This host is missing a critical security update according to Microsoft KB4343885 SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Edge and ChakraCore Remote Memory Corruption Vulnerability (CNVD-2018-18049)

Microsoft Edge is a web browser developed by Microsoft.ChakraCore is the core of the open source Chakra JavaScript scripting engine, which can also be used as a standalone JavaScript engine. A memory corruption memory corruption vulnerability exists in Microsoft Edge and ChakraCore. A remote...

Microsoft Edge Spoofing Vulnerability (CNVD-2018-18475)

Microsoft Edge is a Web browser developed by the American company Microsoft Microsoft. A spoofing vulnerability exists in Microsoft Edge. The vulnerability stems from a failure of the program to properly process HTML content. The vulnerability can be exploited by an attacker to spoof users with t...

CVE-2018-8385

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka “Scripting Engine Memory Corruption Vulnerability.” This affects Internet Explorer 9, ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10. This CVE ...