CVE-2016-7282

Technical details for CVE-2016-7282 are not provided in the connected documents. Public details (affected product/version, root cause, exploit info, and fixes) are not disclosed here; monitor official bulletins for updates.

CVE-2019-0648

CVE-2019-0648 describes an information-disclosure vulnerability in Chakra (the scripting engine) where memory contents could be exposed if an attacker can locate the memory object. The connected documents consistently tie this to ChakraCore/Edge, noting that the scripting engine does not properly...

CVE-2015-2485

CVE-2015-2485 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, enabling memory corruption via a crafted web site. The vulnerability is described as a memory corruption issue potentially allowing remote code execution or DoS. Connected data references to MS15-095 (security update) as a...

CVE-2016-0109

CVE-2016-0109 affects Microsoft Internet Explorer 11 and Microsoft Edge. The weakness is memory corruption that can be triggered by a crafted web site, allowing remote code execution or a denial of service. Affected products are IE11 and Edge, with root cause described as improper handling of mem...

CVE-2016-1104

Technical details for CVE-2016-1104 are not publicly provided in the supplied documents. Monitor for updates; currently, no affected products, exact vulnerability, vectors, or remediation are disclosed here.

CVE-2016-7227

CVE-2016-7227 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, enabling remote attackers to determine the existence of local files via unspecified vectors (Information Disclosure). The issue is documented by NVD with CVSS low impact and network attack vector but no explicit exploit de...

CVE-2017-0200

CVE-2017-0200 is a remote code execution vulnerability in Microsoft Edge caused by improper handling of memory objects, enabling an attacker to execute arbitrary code in the context of the current user. Public exploits exist. The CVE is referenced in multiple security entries (MSRC advisory for C...

CVE-2017-11764

CVE-2017-11764 : A type confusion vulnerability in Microsoft Edge’s Chakra JavaScript engine (ParseCatch path) allows memory corruption. Reported as an Edge scripting engine issue that can be exploited by presenting a specially crafted web page, potentially enabling remote code execution in the u...

CVE-2017-8521

CVE-2017-8521 affects Microsoft Edge on Windows 10 version 1703, where the Edge JavaScript scripting engine can incorrectly handle in-memory objects, enabling remote code execution in the context of the current user when memory is corrupted. Connected sources corroborate a memory-corruption vecto...

CVE-2017-8523

Technical details (affected products, vulnerable components, impact, or fixes) for CVE-2017-8523 are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2017-8728

CVE-2017-8728 is a Windows PDF Library remote code execution vulnerability affecting Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10 (1511–1703) and Windows Server 2016. The issue stems from the Windows PDF Library handling objects in memory, enabling arbitrary code execution in the c...

CVE-2018-0990

Mode C: CVE-2018-0990 is a ChakraCore/Edge remote code execution vulnerability described as memory corruption in the Chakra scripting engine when handling objects in memory. Affected products include Microsoft Edge and ChakraCore. The root cause is in the engine’s memory handling, enabling arbitr...

CVE-2018-8133

A remote code execution (RCE) vulnerability exists in the Chakra scripting engine used by Microsoft Edge and ChakraCore . The root cause is a type confusion resulting from the engine's assumption that the EntrySimpleObjectSlotGetter method has no side effects. Specifically, the method wraps retur...

CVE-2018-8275

A remote code execution vulnerability exists in Microsoft Edge and ChakraCore due to improper memory object access, referred to as the Microsoft Edge Memory Corruption Vulnerability . This flaw allows for potential unauthorized code execution on the affected systems. Remediation involves applying...

CVE-2018-8624

The entries describe CVE-2018-8624 as a remote code execution vulnerability in the Chakra scripting engine’s memory handling, affecting Microsoft Edge and ChakraCore. The root cause is memory corruption of in-memory objects; the vulnerability is exploitable remotely with network access and requir...

CVE-2019-0829

Technical details for CVE-2019-0829 are not provided in the connected documents. Monitor official advisories for updates and confirmed impact.

CVE-2016-3374

The CVE-2016-3374 entry describes an information-disclosure vulnerability in the PDF library used by Microsoft Edge on Windows 8.1, Windows Server 2012 R2/2012, Windows RT 8.1, and Windows 10 (versions 1511 and 1607). The underlying issue allows remote attackers to obtain sensitive information vi...

CVE-2016-4115

Technical details for CVE-2016-4115 are not publicly available in the provided documents. No affected products, vulnerable components, impact, or remediation are specified here. Monitor for updates as additional information becomes available.

CVE-2016-7279

CVE-2016-7279 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, enabling remote code execution or memory corruption via a crafted web site. The vulnerability is listed in OpenVAS feeds among Windows browser vulnerabilities (Edge/IE) and is addressed by Microsoft security updates MS16-1...

CVE-2017-0208

CVE-2017-0208 describes an information disclosure in Microsoft Edge (Chakra scripting engine) caused by improper handling of in-memory objects. The vulnerability could allow an attacker to obtain information to further compromise the system. Documents confirm the issue is tied to the Scripting En...

CVE-2017-8605

Microsoft Edge, present in Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016 , is vulnerable to a Scripting Engine Memory Corruption Vulnerability (CVE-2017-8605 ). The flaw occurs when the JavaScript engine fails to render correctly while handling objects in memory, allowing a remote a...

CVE-2017-8639

CVE-2017-8639 refers to a memory corruption flaw in Microsoft Edge’s scripting engine when rendering objects in memory on Windows 10 (1607/1703) and Windows Server 2016. The issue could allow an attacker to execute arbitrary code in the context of the current user, typically via a web Page that t...

CVE-2018-0927

CVE-2018-0927 relates to an information disclosure in Microsoft browsers (Internet Explorer and Edge) due to how objects are handled in memory. The connected Microsoft KBs (March 2018 updates) describe IE security updates that address multiple memory- and rendering-related issues, including fixes...

CVE-2018-8123

CVE-2018-8123 affects Microsoft Edge (EdgeHTML) and is due to improper handling of objects in memory, causing information disclosure. The vulnerability could be exploited via web-based attacks (e.g., malicious site or embedded content) that tricks a user into visiting the attacker’s page. The doc...

CVE-2018-8286

CVE-2018-8286 is a remote code execution vulnerability in the Chakra scripting engine, affecting Microsoft Edge and ChakraCore. The issue stems from how the Chakra engine handles objects in memory, described in connected GitHub advisories as the “Chakra Scripting Engine Memory Corruption Vulnerab...

CVE-2018-8315

CVE-2018-8315 is an information-disclosure vulnerability in the browser scripting engine. Affected components include ChakraCore, Internet Explorer 11, Microsoft Edge, and Internet Explorer 10, where improper handling of object types leads to partial confidentiality/integrity impact. The CVE’s ba...

CVE-2018-8354

Technical details about CVE-2018-8354 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2018-8556

CVE-2018-8556 is tied to a remote code execution flaw in the Chakra scripting engine’s handling of in-memory objects, affecting Microsoft Edge and ChakraCore. The root cause is memory corruption inside Chakra, leading to arbitrary code execution under remote conditions. The linked advisories (GHS...

CVE-2018-8557

CVE-2018-8557 is a remote code execution in the Chakra scripting engine caused by memory corruption when handling objects, affecting Microsoft Edge and ChakraCore. Connected docs confirm the root cause (memory handling in Chakra) and affected components but do not provide versioned details, explo...

CVE-2019-0591

CVE-2019-0591 describes a remote code execution vulnerability in the Microsoft Edge scripting engine, caused by memory handling issues when processing objects. The CVE affects Edge and is rated HIGH on both CVSSv3 (7.5) and CVSSv2 (7.6) with network attack vector, high complexity, no privileges r...

CVE-2016-1106

CVE-2016-1106 is a use-after-free vulnerability in Adobe Flash Player (affecting Flash 21.0.0.213 and earlier, including components in IE/Edge). The issue is reported to enable arbitrary code execution when processing crafted SWF content; exploits are documented (e.g., in threat reports and advis...

CVE-2016-3274

CVE-2016-3274 affects Microsoft Internet Explorer 9–11 and Microsoft Edge and describes a content-spoofing vulnerability where crafted URLs can mislead users. The root cause is how browsers parse HTTP content, allowing a remote attacker to redirect users to a spoofed site via a specially crafted ...

CVE-2016-3297

CVE-2016-3297 affects Microsoft Internet Explorer 9–11 and Microsoft Edge. The vulnerability is a memory corruption issue in how browsers handle objects, enabling remote code execution when a user visits a crafted site. Impact could include full user rights compromise; in some contexts memory cor...

CVE-2016-3377

The Chakra JavaScript engine in Microsoft Edge is susceptible to a memory corruption vulnerability (specifically a heap-based buffer overflow ) within the processing of the JavaScript map function , as implemented in chakra.dll . A remote attacker can exploit this by tricking a user into visiting...

CVE-2016-3388

CVE-2016-3388 affects Microsoft Internet Explorer 10/11 and Microsoft Edge through improper restriction of access to private namespaces, enabling privilege escalation. The CIRCL/NVD entries in the connected data indicate an exploitation presence (exploit-db entry 40606), but the provided document...

CVE-2016-4108

CVE-2016-4108 is a use-after-free flaw in Adobe Flash Player affecting Flash Player 21.0.0.213 and earlier (as used in IE/Edge). Attack vectors are not specified in the description; exploitation is noted in some sources (e.g., CIRCL/Exploits DB). The issue is linked with multiple related CVEs and...

CVE-2016-4110

CVE-2016-4110 is a use-after-free vulnerability in Adobe Flash Player (and components in related Adobe Flash libraries) that, per connected sources, could lead to arbitrary code execution. Public listings indicate this CVE is part of a set of Flash vulnerabilities fixed in the 2016 updates; multi...

CVE-2017-0133

Technical details for CVE-2017-0133 are not present in the connected documents; the initial entry describes a remote code execution in Microsoft scripting engines, but no vendor/version/root-cause specifics are provided here. Monitor for updates.

CVE-2017-11808

CVE-2017-11808 affects ChakraCore (and Microsoft Edge) on Windows 10 versions (Gold/1511/1607/1703) and Windows Server 2016. The root cause is memory handling in the ChakraCore scripting engine, described as a memory corruption/information disclosure vulnerability that could allow an attacker to ...

CVE-2017-8731

Microsoft Edge Memory Corruption vulnerability (CVE-2017-8731) affects Microsoft Edge on Windows 10 1607 and Windows Server 2016. The issue arises from how Edge accesses objects in memory, allowing an attacker to execute arbitrary code in the context of the current user when a victim opens a spec...

CVE-2018-0994

CVE-2018-0994 is a remote code execution issue described as a memory‑corruption flaw in the Chakra scripting engine used by Microsoft Edge and ChakraCore. The connected sources frame the vulnerability as affecting Edge/ChakraCore and cite a memory handling/primitives weakness in Chakra’s object m...

CVE-2018-8266

CVE-2018-8266 describes a remote code execution vulnerability in Microsoft Edge stemming from memory handling of objects in the Chakra scripting engine (ChakraCore). Affected products are Microsoft Edge and ChakraCore. The underlying issue is memory corruption within Chakra’s object handling, lea...

CVE-2019-0605

Technical details about CVE-2019-0605 are not present in the provided documents; no specifics on affected products, root cause, or fixes. Monitor for updates from official sources.

CVE-2019-0652

Technical details for CVE-2019-0652 are not publicly available in the provided documents. No confirmed affected products, root cause, impact or remediation are present; monitor for updates.

CVE-2019-0655

Technical details for CVE-2019-0655 are not publicly provided in the supplied documents. Connected EUVD entries mention malware labels but do not specify affected product, root cause, impact, or remediation. Monitor for updates.

CVE-2019-0990

Technical details for CVE-2019-0990 are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2019-1413

CVE-2019-1413 : Microsoft Edge security feature bypass (EdgeHTML-based). The vulnerability arises because Edge improperly handles extension requests and fails to request host permission for all_urls, exposing a potential security bypass. CVSS v3.1 base score: 4.3 (MEDIUM). No exploits or remediat...

CVE-2016-3201

CVE-2016-3201 affects Microsoft Windows 8.1, Windows Server 2012 (Gold/R2), Windows 10 (Gold/1511), and Microsoft Edge, enabling remote attackers to read sensitive data from a process’s memory via a crafted PDF document (Windows PDF Information Disclosure Vulnerability). Connected MSKB entries co...

CVE-2016-3295

CVE-2016-3295 is the Microsoft Browser Memory Corruption Vulnerability affecting Internet Explorer 10/11 and Microsoft Edge. The issue allows remote attackers to execute arbitrary code or cause a memory corruption-based DoS via a crafted web site. Root cause is memory handling in browser objects,...

CVE-2017-0035

CVE-2017-0134 is described in the connected advisory as a remote code execution vulnerability in Microsoft Edge’s scripting engine, caused by memory handling of objects in memory. The vulnerability could let a remote attacker execute arbitrary code in the context of the current user, with the pot...