CVE-2019-0860

Technical details for CVE-2019-0860 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2019-1192

Technical details for CVE-2019-1192 are not publicly available in the provided documents. Monitor for updates from Microsoft MSRC and NVD.

CVE-2016-0111

CVE-2016-0111 affects Microsoft Internet Explorer 9–11 and Microsoft Edge. It is a memory corruption/remote code execution vulnerability triggered by visiting a crafted site, caused by improper memory handling in the browser. Exploitation existed (e.g., Exploit-DB) and patches were released (MS16...

CVE-2016-7196

CVE-2016-7196 affects Microsoft Internet Explorer 10/11 and Microsoft Edge. The vulnerability enables remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Severity is HIGH (CVSS v3: 7.5) with network access, user interaction required....

CVE-2016-7279

CVE-2016-7279 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, enabling remote code execution or memory corruption via a crafted web site. The vulnerability is listed in OpenVAS feeds among Windows browser vulnerabilities (Edge/IE) and is addressed by Microsoft security updates MS16-1...

CVE-2017-11808

CVE-2017-11808 affects ChakraCore (and Microsoft Edge) on Windows 10 versions (Gold/1511/1607/1703) and Windows Server 2016. The root cause is memory handling in the ChakraCore scripting engine, described as a memory corruption/information disclosure vulnerability that could allow an attacker to ...

CVE-2017-11863

Microsoft Edge in Windows 10 (Gold/1511/1607/1703/1709) and Windows Server 2016/1709 is affected by a vulnerability where Edge CSP validation can be bypassed, allowing an attacker to trick a user into loading a page with malicious content. Root cause: improper validation of CSP in Edge when loadi...

CVE-2018-0781

CVE-2018-0781 maps to a Microsoft Edge scripting engine memory corruption vulnerability affecting Windows 10 (various builds) and Windows Server 2016. The connected advisory indicates a remote code execution flaw caused by how the scripting engine handles objects in memory, allowing a remote unau...

CVE-2018-0994

CVE-2018-0994 is a remote code execution issue described as a memory‑corruption flaw in the Chakra scripting engine used by Microsoft Edge and ChakraCore. The connected sources frame the vulnerability as affecting Edge/ChakraCore and cite a memory handling/primitives weakness in Chakra’s object m...

CVE-2018-8279

CVE-2018-8279 is a remote code execution vulnerability affecting Microsoft Edge (and ChakraCore) caused by Edge improperly accessing objects in memory. The connected sources confirm the issue, with the description stating memory access errors as the root cause and Edge as affected. A CIRCL sighti...

CVE-2018-8557

CVE-2018-8557 is a remote code execution in the Chakra scripting engine caused by memory corruption when handling objects, affecting Microsoft Edge and ChakraCore. Connected docs confirm the root cause (memory handling in Chakra) and affected components but do not provide versioned details, explo...

CVE-2019-0652

Technical details for CVE-2019-0652 are not publicly available in the provided documents. No confirmed affected products, root cause, impact or remediation are present; monitor for updates.

CVE-2020-1059

CVE-2020-1059 describes a spoofing vulnerability in Microsoft Edge where improper parsing of HTTP content could allow an attacker to redirect a user to a malicious website. The Microsoft description specifies that exploitation requires the user to click a specially crafted URL (phish-like scenari...

CVE-2015-2485

CVE-2015-2485 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, enabling memory corruption via a crafted web site. The vulnerability is described as a memory corruption issue potentially allowing remote code execution or DoS. Connected data references to MS15-095 (security update) as a...

CVE-2016-3201

CVE-2016-3201 affects Microsoft Windows 8.1, Windows Server 2012 (Gold/R2), Windows 10 (Gold/1511), and Microsoft Edge, enabling remote attackers to read sensitive data from a process’s memory via a crafted PDF document (Windows PDF Information Disclosure Vulnerability). Connected MSKB entries co...

CVE-2016-3295

CVE-2016-3295 is the Microsoft Browser Memory Corruption Vulnerability affecting Internet Explorer 10/11 and Microsoft Edge. The issue allows remote attackers to execute arbitrary code or cause a memory corruption-based DoS via a crafted web site. Root cause is memory handling in browser objects,...

CVE-2016-7227

CVE-2016-7227 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, enabling remote attackers to determine the existence of local files via unspecified vectors (Information Disclosure). The issue is documented by NVD with CVSS low impact and network attack vector but no explicit exploit de...

CVE-2016-7286

CVE-2016-7286: Microsoft Edge scripting engine memory corruption via a crafted web site. Connected docs discuss a related Edge UAF in CVE-2016-7288 (TypedArray.sort in Chakra.dll) with PoC details and analysis, indicating a memory corruption class vulnerability; MS16-145 patch is identified in th...

CVE-2016-7296

The connected material centers on Microsoft Edge memory corruption in scripting/TypedArray handling (MS Edge UAF) with PoC references and code analysis tied to the 2016 CVE family (e.g., CVE-2016-7288, CVE-2016-7286) and Chakra.dll internals. It details how a TypedArray.sort callback can trigger ...

CVE-2017-0035

CVE-2017-0134 is described in the connected advisory as a remote code execution vulnerability in Microsoft Edge’s scripting engine, caused by memory handling of objects in memory. The vulnerability could let a remote attacker execute arbitrary code in the context of the current user, with the pot...

CVE-2017-0133

Technical details for CVE-2017-0133 are not present in the connected documents; the initial entry describes a remote code execution in Microsoft scripting engines, but no vendor/version/root-cause specifics are provided here. Monitor for updates.

CVE-2017-0241

Mode C: CVE-2017-0241 affects Microsoft Edge. The vulnerability is an elevation of privilege when Edge renders a domain-less URL, allowing actions in the Intranet Zone. Affected component: Edge rendering/domain handling; root cause details are not fully enumerated in the provided docs beyond the ...

CVE-2017-8499

CVE-2017-8499 affects Microsoft Edge on Windows 10 (1703). The description and CNVD entry indicate a remote memory corruption vulnerability in Edge’s scripting engine that can allow arbitrary code execution in the context of the current user when Edge mishandles in-memory objects. Mitigation is v...

CVE-2017-8520

CVE-2017-8520 is described in connected docs as a remote code execution vulnerability in the Microsoft Edge scripting engine on Windows 10 version 1703, caused by improper handling of objects in memory. The CNVD entry for CVE-2017-16997 notes a remote memory corruption exploit, with Edge as the a...

CVE-2017-8671

CVE-2017-8671 describes a remote code execution vulnerability in Microsoft Edge’s scripting engine (Chakra) for Windows 10 1511/1607/1703 and Windows Server 2016. The root cause is memory corruption when handling objects in memory during JavaScript rendering, allowing an attacker to execute arbit...

CVE-2018-8130

CVE-2018-8130 describes a remote code execution vulnerability in the Chakra Scripting Engine (ChakraCore) used by Microsoft Edge. The issue arises from how objects are handled in memory, leading to memory corruption. Affected products/components include Microsoft Edge and ChakraCore. The metadata...

CVE-2018-8266

CVE-2018-8266 describes a remote code execution vulnerability in Microsoft Edge stemming from memory handling of objects in the Chakra scripting engine (ChakraCore). Affected products are Microsoft Edge and ChakraCore. The underlying issue is memory corruption within Chakra’s object handling, lea...

CVE-2018-8275

CVE-2018-8275 describes a remote code execution in Microsoft Edge due to memory corruption when Edge improperly accesses objects in memory (affecting Edge and ChakraCore). The vulnerability is rated HIGH (CVSS v3.0: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). AFFECTED COMPONENTS: Microsoft Edge; Chakra...

CVE-2018-8354

Technical details about CVE-2018-8354 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2018-8512

CVE-2018-8512 describes a security feature bypass in Microsoft Edge where the Edge Content Security Policy (CSP) fails to properly validate certain specially crafted documents. Affected product: Microsoft Edge. Root cause (as stated): CSP validation weakness leading to bypass of security features...

CVE-2019-0605

Technical details about CVE-2019-0605 are not present in the provided documents; no specifics on affected products, root cause, or fixes. Monitor for updates from official sources.

CVE-2019-0990

Technical details for CVE-2019-0990 are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2015-6088

CVE-2015-6088 affects Internet Explorer 9–11 and Microsoft Edge, enabling remote ASLR bypass via a crafted webpage. The issue is addressed by MS15-112 (IE) and MS15-113 (Edge). Remediation: apply the Microsoft security updates referenced in the connected MSB advisories (MS15-112 for IE, MS15-113 ...

CVE-2016-0154

CVE-2016-0154 affects Internet Explorer 9–11 and Microsoft Edge. A memory corruption vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website, due to how browsers handle memory objects. The issue is covered in Microsoft advisories MS16-037...

CVE-2016-3296

CVE-2016-3296 affects the Chakra JavaScript engine used by Microsoft Edge. The vulnerability is a remote code execution flaw caused by memory corruption in the scripting engine when handling in-memory objects, exploitable via a crafted web site. Impact includes arbitrary code execution under the ...

CVE-2016-3377

CVE-2016-3377 affects the Chakra JavaScript engine in Microsoft Edge. The vulnerability involves memory corruption in the scripting engine when handling objects, exploitable by remote attackers via a crafted website, potentially enabling remote code execution or a denial-of-service. Connected doc...

CVE-2017-0017

CVE-2017-0017 affects Microsoft Edge where the RegEx class in the XSS filter can be exploited to conduct cross-site scripting and obtain sensitive information via unspecified vectors. The description notes this is distinct from other CVEs in the same year. The connected documents do not provide c...

CVE-2017-8731

Microsoft Edge Memory Corruption vulnerability (CVE-2017-8731) affects Microsoft Edge on Windows 10 1607 and Windows Server 2016. The issue arises from how Edge accesses objects in memory, allowing an attacker to execute arbitrary code in the context of the current user when a victim opens a spec...

CVE-2018-0800

CVE-2018-0800 refers to an Information Disclosure in the Microsoft Edge scripting engine on Windows 10 version 1709, due to how the Edge scripting engine handles objects in memory. The CNVD entries describe an information-disclosure vulnerability in the Edge scripting engine (affecting Windows 10...

CVE-2018-1023

Technical details for CVE-2018-1023 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2018-8315

CVE-2018-8315 is an information-disclosure vulnerability in the browser scripting engine. Affected components include ChakraCore, Internet Explorer 11, Microsoft Edge, and Internet Explorer 10, where improper handling of object types leads to partial confidentiality/integrity impact. The CVE’s ba...

CVE-2018-8456

CVE-2018-8456 affects Microsoft Edge and ChakraCore. The vulnerability arises from how the ChakraCore scripting engine handles memory objects, enabling remote code execution. The CVSS metrics show HIGH severity with network attack vector, high complexity, no privileges required, user interaction ...

CVE-2018-8503

CVE-2018-8503 is discussed across multiple security entries linked to ChakraCore/Microsoft Edge, describing a remote code execution in the Chakra scripting engine due to memory handling of objects. The connected advisories (GHSA entries) and EUVD records identify this family as ChakraCore/RCE vul...

CVE-2018-8545

CVE-2018-8545 is an information-disclosure vulnerability in Microsoft Edge where cross-origin requests are mishandled, allowing an attacker to determine the origin of all webpages in the affected browser. Affected product: Microsoft Edge (Edge/ChakraCore-related components cited in multiple advis...

CVE-2019-0565

CVE-2019-0565 is a remote code execution vulnerability in Microsoft Edge caused by improper handling of in-memory objects in the browser. Successful exploitation could allow an attacker to execute arbitrary code in the context of the current user, potentially granting the attacker the user’s righ...

CVE-2019-0643

CVE-2019-0643 is an information‑disclosure vulnerability in Microsoft Edge where cross-origin requests are handled in a way that could allow an attacker to determine the origin of all webpages in the affected browser. The issue is addressed by a security update from Microsoft (Edge/IE stack) via ...

CVE-2019-0648

CVE-2019-0648 describes an information-disclosure vulnerability in Chakra (the scripting engine) where memory contents could be exposed if an attacker can locate the memory object. The connected documents consistently tie this to ChakraCore/Edge, noting that the scripting engine does not properly...

CVE-2019-1413

CVE-2019-1413 : Microsoft Edge security feature bypass (EdgeHTML-based). The vulnerability arises because Edge improperly handles extension requests and fails to request host permission for all_urls, exposing a potential security bypass. CVSS v3.1 base score: 4.3 (MEDIUM). No exploits or remediat...

CVE-2015-2442

The CVE-2015-2442 entry concerns Microsoft Internet Explorer (IE) versions 8–11 and Edge, described as a memory corruption vulnerability that allows remote code execution or denial of service when a user visits a crafted site. The description explicitly labels it as a Memory Corruption Vulnerabil...

CVE-2016-1106

CVE-2016-1106 is a use-after-free vulnerability in Adobe Flash Player (affecting Flash 21.0.0.213 and earlier, including components in IE/Edge). The issue is reported to enable arbitrary code execution when processing crafted SWF content; exploits are documented (e.g., in threat reports and advis...