CVE-2017-8523

Technical details (affected products, vulnerable components, impact, or fixes) for CVE-2017-8523 are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2017-8653

CVE-2017-8653 is a memory-corruption vulnerability in Microsoft browsers on Windows platforms (several Windows versions listed in the initial entry) that allows remote code execution when the browser improperly accesses objects in memory. The issue is categorized under a browser memory corruption...

CVE-2017-8728

CVE-2017-8728 is a Windows PDF Library remote code execution vulnerability affecting Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10 (1511–1703) and Windows Server 2016. The issue stems from the Windows PDF Library handling objects in memory, enabling arbitrary code execution in the c...

CVE-2018-0994

CVE-2018-0994 is a remote code execution issue described as a memory‑corruption flaw in the Chakra scripting engine used by Microsoft Edge and ChakraCore. The connected sources frame the vulnerability as affecting Edge/ChakraCore and cite a memory handling/primitives weakness in Chakra’s object m...

CVE-2018-8123

CVE-2018-8123 affects Microsoft Edge (EdgeHTML) and is due to improper handling of objects in memory, causing information disclosure. The vulnerability could be exploited via web-based attacks (e.g., malicious site or embedded content) that tricks a user into visiting the attacker’s page. The doc...

CVE-2019-0591

CVE-2019-0591 describes a remote code execution vulnerability in the Microsoft Edge scripting engine, caused by memory handling issues when processing objects. The CVE affects Edge and is rated HIGH on both CVSSv3 (7.5) and CVSSv2 (7.6) with network attack vector, high complexity, no privileges r...

CVE-2019-0648

CVE-2019-0648 describes an information-disclosure vulnerability in Chakra (the scripting engine) where memory contents could be exposed if an attacker can locate the memory object. The connected documents consistently tie this to ChakraCore/Edge, noting that the scripting engine does not properly...

CVE-2016-1104

Technical details for CVE-2016-1104 are not publicly provided in the supplied documents. Monitor for updates; currently, no affected products, exact vulnerability, vectors, or remediation are disclosed here.

CVE-2016-3295

CVE-2016-3295 is the Microsoft Browser Memory Corruption Vulnerability affecting Internet Explorer 10/11 and Microsoft Edge. The issue allows remote attackers to execute arbitrary code or cause a memory corruption-based DoS via a crafted web site. Root cause is memory handling in browser objects,...

CVE-2016-4110

CVE-2016-4110 is a use-after-free vulnerability in Adobe Flash Player (and components in related Adobe Flash libraries) that, per connected sources, could lead to arbitrary code execution. Public listings indicate this CVE is part of a set of Flash vulnerabilities fixed in the 2016 updates; multi...

CVE-2016-7286

CVE-2016-7286: Microsoft Edge scripting engine memory corruption via a crafted web site. Connected docs discuss a related Edge UAF in CVE-2016-7288 (TypedArray.sort in Chakra.dll) with PoC details and analysis, indicating a memory corruption class vulnerability; MS16-145 patch is identified in th...

CVE-2017-11863

Microsoft Edge in Windows 10 (Gold/1511/1607/1703/1709) and Windows Server 2016/1709 is affected by a vulnerability where Edge CSP validation can be bypassed, allowing an attacker to trick a user into loading a page with malicious content. Root cause: improper validation of CSP in Edge when loadi...

CVE-2017-8521

CVE-2017-8521 affects Microsoft Edge on Windows 10 version 1703, where the Edge JavaScript scripting engine can incorrectly handle in-memory objects, enabling remote code execution in the context of the current user when memory is corrupted. Connected sources corroborate a memory-corruption vecto...

CVE-2018-8512

CVE-2018-8512 describes a security feature bypass in Microsoft Edge where the Edge Content Security Policy (CSP) fails to properly validate certain specially crafted documents. Affected product: Microsoft Edge. Root cause (as stated): CSP validation weakness leading to bypass of security features...

CVE-2018-8542

CVE-2018-8542 describes a remote code execution vulnerability in the Chakra scripting engine memory handling that affects Microsoft Edge and ChakraCore. The flaw arises from how in-memory objects are processed, enabling arbitrary code execution on vulnerable systems. Exploitation details, affecte...

CVE-2018-8556

CVE-2018-8556 is tied to a remote code execution flaw in the Chakra scripting engine’s handling of in-memory objects, affecting Microsoft Edge and ChakraCore. The root cause is memory corruption inside Chakra, leading to arbitrary code execution under remote conditions. The linked advisories (GHS...

CVE-2018-8557

CVE-2018-8557 is a remote code execution in the Chakra scripting engine caused by memory corruption when handling objects, affecting Microsoft Edge and ChakraCore. Connected docs confirm the root cause (memory handling in Chakra) and affected components but do not provide versioned details, explo...

CVE-2019-0655

Technical details for CVE-2019-0655 are not publicly provided in the supplied documents. Connected EUVD entries mention malware labels but do not specify affected product, root cause, impact, or remediation. Monitor for updates.

CVE-2019-0860

Technical details for CVE-2019-0860 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2019-0990

Technical details for CVE-2019-0990 are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2019-1192

Technical details for CVE-2019-1192 are not publicly available in the provided documents. Monitor for updates from Microsoft MSRC and NVD.

CVE-2015-2485

CVE-2015-2485 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, enabling memory corruption via a crafted web site. The vulnerability is described as a memory corruption issue potentially allowing remote code execution or DoS. Connected data references to MS15-095 (security update) as a...

CVE-2015-6088

CVE-2015-6088 affects Internet Explorer 9–11 and Microsoft Edge, enabling remote ASLR bypass via a crafted webpage. The issue is addressed by MS15-112 (IE) and MS15-113 (Edge). Remediation: apply the Microsoft security updates referenced in the connected MSB advisories (MS15-112 for IE, MS15-113 ...

CVE-2016-3201

CVE-2016-3201 affects Microsoft Windows 8.1, Windows Server 2012 (Gold/R2), Windows 10 (Gold/1511), and Microsoft Edge, enabling remote attackers to read sensitive data from a process’s memory via a crafted PDF document (Windows PDF Information Disclosure Vulnerability). Connected MSKB entries co...

CVE-2016-4115

Technical details for CVE-2016-4115 are not publicly available in the provided documents. No affected products, vulnerable components, impact, or remediation are specified here. Monitor for updates as additional information becomes available.

CVE-2017-0017

CVE-2017-0017 affects Microsoft Edge where the RegEx class in the XSS filter can be exploited to conduct cross-site scripting and obtain sensitive information via unspecified vectors. The description notes this is distinct from other CVEs in the same year. The connected documents do not provide c...

CVE-2017-0035

CVE-2017-0134 is described in the connected advisory as a remote code execution vulnerability in Microsoft Edge’s scripting engine, caused by memory handling of objects in memory. The vulnerability could let a remote attacker execute arbitrary code in the context of the current user, with the pot...

CVE-2017-0133

Technical details for CVE-2017-0133 are not present in the connected documents; the initial entry describes a remote code execution in Microsoft scripting engines, but no vendor/version/root-cause specifics are provided here. Monitor for updates.

CVE-2017-0241

Mode C: CVE-2017-0241 affects Microsoft Edge. The vulnerability is an elevation of privilege when Edge renders a domain-less URL, allowing actions in the Intranet Zone. Affected component: Edge rendering/domain handling; root cause details are not fully enumerated in the provided docs beyond the ...

CVE-2017-11808

CVE-2017-11808 affects ChakraCore (and Microsoft Edge) on Windows 10 versions (Gold/1511/1607/1703) and Windows Server 2016. The root cause is memory handling in the ChakraCore scripting engine, described as a memory corruption/information disclosure vulnerability that could allow an attacker to ...

CVE-2017-11874

Microsoft Edge in Windows 10 (1703, 1709), Windows Server (1709) and ChakraCore is affected by a CFG bypass that allows arbitrary code execution due to how memory is accessed by code produced by the Edge JIT compiler. The vulnerability impacts Edge/CSP handling and CFG enforcement; CVE-2017-11874...

CVE-2017-8499

CVE-2017-8499 affects Microsoft Edge on Windows 10 (1703). The description and CNVD entry indicate a remote memory corruption vulnerability in Edge’s scripting engine that can allow arbitrary code execution in the context of the current user when Edge mishandles in-memory objects. Mitigation is v...

CVE-2018-8130

CVE-2018-8130 describes a remote code execution vulnerability in the Chakra Scripting Engine (ChakraCore) used by Microsoft Edge. The issue arises from how objects are handled in memory, leading to memory corruption. Affected products/components include Microsoft Edge and ChakraCore. The metadata...

CVE-2018-8275

CVE-2018-8275 describes a remote code execution in Microsoft Edge due to memory corruption when Edge improperly accesses objects in memory (affecting Edge and ChakraCore). The vulnerability is rated HIGH (CVSS v3.0: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). AFFECTED COMPONENTS: Microsoft Edge; Chakra...

CVE-2018-8351

CVE-2018-8351 is an information-disclosure vulnerability in affected Microsoft browsers (Internet Explorer 11, Edge, and Internet Explorer 10) caused by improper cross-frame interaction. The NVD and related records describe the issue as a cross-frame interaction flaw enabling partial confidential...

CVE-2018-8354

Technical details about CVE-2018-8354 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2018-8567

CVE-2018-8567 is an elevation of privilege in Microsoft Edge caused by insufficient enforcement of cross-domain policies. An attacker could craft a web-based scenario (hosted or compromised sites) to entice a user to visit content that exploits cross-domain information leakage to inject data into...

CVE-2019-0652

Technical details for CVE-2019-0652 are not publicly available in the provided documents. No confirmed affected products, root cause, impact or remediation are present; monitor for updates.

CVE-2015-2442

The CVE-2015-2442 entry concerns Microsoft Internet Explorer (IE) versions 8–11 and Edge, described as a memory corruption vulnerability that allows remote code execution or denial of service when a user visits a crafted site. The description explicitly labels it as a Memory Corruption Vulnerabil...

CVE-2016-3377

CVE-2016-3377 affects the Chakra JavaScript engine in Microsoft Edge. The vulnerability involves memory corruption in the scripting engine when handling objects, exploitable by remote attackers via a crafted website, potentially enabling remote code execution or a denial-of-service. Connected doc...

CVE-2016-7227

CVE-2016-7227 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, enabling remote attackers to determine the existence of local files via unspecified vectors (Information Disclosure). The issue is documented by NVD with CVSS low impact and network attack vector but no explicit exploit de...

CVE-2017-8520

CVE-2017-8520 is described in connected docs as a remote code execution vulnerability in the Microsoft Edge scripting engine on Windows 10 version 1703, caused by improper handling of objects in memory. The CNVD entry for CVE-2017-16997 notes a remote memory corruption exploit, with Edge as the a...

CVE-2017-8548

CVE-2017-8548 affects Microsoft Edge in Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. It describes improper handling of in-memory objects in Edge’s scripting engine, causing memory corruption and information disclosure that could aid system compromise. A public exploit has been lin...

CVE-2017-8655

CVE-2017-8655 is a Microsoft Edge memory corruption vulnerability in Windows 10/Server 2016 where the JS engine misrenders objects in memory, enabling remote code execution in the caller’s context. The description and connected Nessus advisories confirm impact on Edge’s scripting engine across mu...

CVE-2018-8266

CVE-2018-8266 describes a remote code execution vulnerability in Microsoft Edge stemming from memory handling of objects in the Chakra scripting engine (ChakraCore). Affected products are Microsoft Edge and ChakraCore. The underlying issue is memory corruption within Chakra’s object handling, lea...

CVE-2018-8315

CVE-2018-8315 is an information-disclosure vulnerability in the browser scripting engine. Affected components include ChakraCore, Internet Explorer 11, Microsoft Edge, and Internet Explorer 10, where improper handling of object types leads to partial confidentiality/integrity impact. The CVE’s ba...

CVE-2018-8456

CVE-2018-8456 affects Microsoft Edge and ChakraCore. The vulnerability arises from how the ChakraCore scripting engine handles memory objects, enabling remote code execution. The CVSS metrics show HIGH severity with network attack vector, high complexity, no privileges required, user interaction ...

CVE-2019-0605

Technical details about CVE-2019-0605 are not present in the provided documents; no specifics on affected products, root cause, or fixes. Monitor for updates from official sources.

CVE-2020-1059

CVE-2020-1059 describes a spoofing vulnerability in Microsoft Edge where improper parsing of HTTP content could allow an attacker to redirect a user to a malicious website. The Microsoft description specifies that exploitation requires the user to click a specially crafted URL (phish-like scenari...

CVE-2021-38641

CVE-2021-38641 affects Microsoft Edge for Android. The issue is described as a Spoofing Vulnerability in Edge for Android. Publicly documented details in connected sources indicate that fixes have been released for Microsoft Edge (including Edge for Android) and that users should install updates ...