CVE-2018-8288

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8242,...

CVE-2018-8278

CVE-2018-8278 is a Microsoft Edge content spoofing vulnerability caused by improper handling of certain HTML content. A remote attacker could lure a user to a malicious website or email link that spoofs the displayed site or serves as a pivot to chain attacks with other vulnerabilities. Exploitat...

CVE-2018-8291

The CVE-2018-8291 entry describes a remote code execution in the ChakraCore scripting engine affecting ChakraCore, Internet Explorer 11, and Microsoft Edge due to memory handling in scripting objects. Root cause: memory object handling in the scripting engine leading to RCE. Public references sho...

CVE-2018-8325

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8289, CVE-2018-8297, CVE-2018-8324...

CVE-2018-8289

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8297, CVE-2018-8324, CVE-2018-8325...

Microsoft Internet Explorer and Edge Scripting Engine Memory Corruption Vulnerability (CNVD-2018-15435)

Microsoft Edge is the web browser built into the Windows 10 version.Internet Explorer is a web browser from Microsoft Corporation. A memory corruption vulnerability exists in the Microsoft Internet Explorer and Edge scripting engine. The vulnerability stems from a problem in the way the scripting...

CVE-2018-8297

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8289, CVE-2018-8324, CVE-2018-8325...

CVE-2018-8274

The CVE-2018-8274 family concerns a remote code execution vulnerability in Microsoft Edge caused by memory corruption from improper access to objects in memory. Affected components include Microsoft Edge, with some entries (e.g., CVE-2018-8279) noting ChakraCore as involved. The root cause is a m...

CVE-2018-8262

CVE-2018-8262 is a Microsoft Edge remote code execution vulnerability described as memory corruption from improper access to objects in memory. Affected product is Edge; some related entries also mention ChakraCore. The issue stems from Edge failing to handle objects in memory, enabling code exec...

Microsoft Edge Memory Corruption Vulnerability (CNVD-2018-12888)

Edge is Microsoft's browser for Windows 10. A memory corruption vulnerability exists in Microsoft Edge. The vulnerability stems from Microsoft Edge failing to properly access objects in memory. An attacker can exploit the vulnerability to execute arbitrary code in the context of the current user,...

CVE-2018-8291

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8242,...

CVE-2018-8290

The connected sources describe CVE-2018-8290 as a remote code execution in the Chakra scripting engine’s memory handling, affecting Microsoft Edge and ChakraCore. The vulnerability arises from how Chakra handles objects in memory, labeled as a memory corruption vulnerability (Chakra Scripting Eng...

CVE-2018-8288

CVE-2018-8288 is a remote code execution vulnerability in ChakraCore, Internet Explorer 11, and Microsoft Edge caused by memory handling of objects in the scripting engine (memory corruption). The CVE notes high impact with network access and required user interaction. Public references in the co...

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2018-12890)

Edge is Microsoft's browser for Windows 10. A memory corruption vulnerability exists in Microsoft Edge. The vulnerability stems from a problem with the way the Chakra scripting engine in Microsoft Edge handles objects in memory. An attacker could exploit the vulnerability to execute arbitrary cod...

CVE-2018-8280

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8286, CVE-2018-8290,...

Microsoft Edge Content Spoofing Vulnerability

Microsoft Edge is the web browser built into the Windows 10 version. A content spoofing vulnerability exists in Microsoft Edge. The vulnerability stems from Microsoft Edge's inability to properly handle certain HTML content. A remote user can exploit the vulnerability to conduct content spoofing ...

CVE-2018-8297

CVE-2018-8297 describes an information disclosure in Microsoft Edge caused by improper handling of objects in memory. Affected software: Microsoft Edge. The entry only states this vulnerability exists and is unique from related CVEs (CVE-2018-8289, CVE-2018-8324, CVE-2018-8325); no specific root-...

CVE-2018-8294

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8280, CVE-2018-8286,...

Microsoft Edge Chakra Scripting Engine Memory Corruption Vulnerability (CNVD-2018-12889)

Edge is Microsoft's browser for Windows 10. A memory corruption vulnerability exists in Microsoft Edge. The vulnerability stems from a problem with the way the Chakra scripting engine in Microsoft Edge handles objects in memory. An attacker could exploit the vulnerability to execute arbitrary cod...

CVE-2018-8324

An information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8289, CVE-2018-8297, CVE-2018-8325...