CVE-2017-11808

CVE-2017-11808 affects ChakraCore (and Microsoft Edge) on Windows 10 versions (Gold/1511/1607/1703) and Windows Server 2016. The root cause is memory handling in the ChakraCore scripting engine, described as a memory corruption/information disclosure vulnerability that could allow an attacker to ...

CVE-2018-8556

CVE-2018-8556 is tied to a remote code execution flaw in the Chakra scripting engine’s handling of in-memory objects, affecting Microsoft Edge and ChakraCore. The root cause is memory corruption inside Chakra, leading to arbitrary code execution under remote conditions. The linked advisories (GHS...

CVE-2018-8557

CVE-2018-8557 is a remote code execution in the Chakra scripting engine caused by memory corruption when handling objects, affecting Microsoft Edge and ChakraCore. Connected docs confirm the root cause (memory handling in Chakra) and affected components but do not provide versioned details, explo...

CVE-2019-0652

Technical details for CVE-2019-0652 are not publicly available in the provided documents. No confirmed affected products, root cause, impact or remediation are present; monitor for updates.

CVE-2019-0829

Technical details for CVE-2019-0829 are not provided in the connected documents. Monitor official advisories for updates and confirmed impact.

CVE-2016-3201

CVE-2016-3201 affects Microsoft Windows 8.1, Windows Server 2012 (Gold/R2), Windows 10 (Gold/1511), and Microsoft Edge, enabling remote attackers to read sensitive data from a process’s memory via a crafted PDF document (Windows PDF Information Disclosure Vulnerability). Connected MSKB entries co...

CVE-2016-3295

CVE-2016-3295 is the Microsoft Browser Memory Corruption Vulnerability affecting Internet Explorer 10/11 and Microsoft Edge. The issue allows remote attackers to execute arbitrary code or cause a memory corruption-based DoS via a crafted web site. Root cause is memory handling in browser objects,...

CVE-2016-7227

CVE-2016-7227 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, enabling remote attackers to determine the existence of local files via unspecified vectors (Information Disclosure). The issue is documented by NVD with CVSS low impact and network attack vector but no explicit exploit de...

CVE-2017-0035

CVE-2017-0134 is described in the connected advisory as a remote code execution vulnerability in Microsoft Edge’s scripting engine, caused by memory handling of objects in memory. The vulnerability could let a remote attacker execute arbitrary code in the context of the current user, with the pot...

CVE-2017-0133

Technical details for CVE-2017-0133 are not present in the connected documents; the initial entry describes a remote code execution in Microsoft scripting engines, but no vendor/version/root-cause specifics are provided here. Monitor for updates.

CVE-2017-0241

Mode C: CVE-2017-0241 affects Microsoft Edge. The vulnerability is an elevation of privilege when Edge renders a domain-less URL, allowing actions in the Intranet Zone. Affected component: Edge rendering/domain handling; root cause details are not fully enumerated in the provided docs beyond the ...

CVE-2017-11863

Microsoft Edge in Windows 10 (Gold/1511/1607/1703/1709) and Windows Server 2016/1709 is affected by a vulnerability where Edge CSP validation can be bypassed, allowing an attacker to trick a user into loading a page with malicious content. Root cause: improper validation of CSP in Edge when loadi...

CVE-2017-8520

CVE-2017-8520 is described in connected docs as a remote code execution vulnerability in the Microsoft Edge scripting engine on Windows 10 version 1703, caused by improper handling of objects in memory. The CNVD entry for CVE-2017-16997 notes a remote memory corruption exploit, with Edge as the a...

CVE-2017-8671

CVE-2017-8671 describes a remote code execution vulnerability in Microsoft Edge’s scripting engine (Chakra) for Windows 10 1511/1607/1703 and Windows Server 2016. The root cause is memory corruption when handling objects in memory during JavaScript rendering, allowing an attacker to execute arbit...

CVE-2018-0781

CVE-2018-0781 maps to a Microsoft Edge scripting engine memory corruption vulnerability affecting Windows 10 (various builds) and Windows Server 2016. The connected advisory indicates a remote code execution flaw caused by how the scripting engine handles objects in memory, allowing a remote unau...

CVE-2018-0994

CVE-2018-0994 is a remote code execution issue described as a memory‑corruption flaw in the Chakra scripting engine used by Microsoft Edge and ChakraCore. The connected sources frame the vulnerability as affecting Edge/ChakraCore and cite a memory handling/primitives weakness in Chakra’s object m...

CVE-2018-8130

CVE-2018-8130 describes a remote code execution vulnerability in the Chakra Scripting Engine (ChakraCore) used by Microsoft Edge. The issue arises from how objects are handled in memory, leading to memory corruption. Affected products/components include Microsoft Edge and ChakraCore. The metadata...

CVE-2018-8279

CVE-2018-8279 is a remote code execution vulnerability affecting Microsoft Edge (and ChakraCore) caused by Edge improperly accessing objects in memory. The connected sources confirm the issue, with the description stating memory access errors as the root cause and Edge as affected. A CIRCL sighti...

CVE-2019-0860

Technical details for CVE-2019-0860 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2015-2485

CVE-2015-2485 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, enabling memory corruption via a crafted web site. The vulnerability is described as a memory corruption issue potentially allowing remote code execution or DoS. Connected data references to MS15-095 (security update) as a...

CVE-2016-3296

CVE-2016-3296 affects the Chakra JavaScript engine used by Microsoft Edge. The vulnerability is a remote code execution flaw caused by memory corruption in the scripting engine when handling in-memory objects, exploitable via a crafted web site. Impact includes arbitrary code execution under the ...

CVE-2017-0017

CVE-2017-0017 affects Microsoft Edge where the RegEx class in the XSS filter can be exploited to conduct cross-site scripting and obtain sensitive information via unspecified vectors. The description notes this is distinct from other CVEs in the same year. The connected documents do not provide c...

CVE-2017-8499

CVE-2017-8499 affects Microsoft Edge on Windows 10 (1703). The description and CNVD entry indicate a remote memory corruption vulnerability in Edge’s scripting engine that can allow arbitrary code execution in the context of the current user when Edge mishandles in-memory objects. Mitigation is v...

CVE-2017-8731

Microsoft Edge Memory Corruption vulnerability (CVE-2017-8731) affects Microsoft Edge on Windows 10 1607 and Windows Server 2016. The issue arises from how Edge accesses objects in memory, allowing an attacker to execute arbitrary code in the context of the current user when a victim opens a spec...

CVE-2018-0800

CVE-2018-0800 refers to an Information Disclosure in the Microsoft Edge scripting engine on Windows 10 version 1709, due to how the Edge scripting engine handles objects in memory. The CNVD entries describe an information-disclosure vulnerability in the Edge scripting engine (affecting Windows 10...

CVE-2018-1023

Technical details for CVE-2018-1023 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2018-8275

CVE-2018-8275 describes a remote code execution in Microsoft Edge due to memory corruption when Edge improperly accesses objects in memory (affecting Edge and ChakraCore). The vulnerability is rated HIGH (CVSS v3.0: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). AFFECTED COMPONENTS: Microsoft Edge; Chakra...

CVE-2018-8354

Technical details about CVE-2018-8354 are not publicly provided in the supplied documents. Monitor for updates from official advisories.

CVE-2018-8512

CVE-2018-8512 describes a security feature bypass in Microsoft Edge where the Edge Content Security Policy (CSP) fails to properly validate certain specially crafted documents. Affected product: Microsoft Edge. Root cause (as stated): CSP validation weakness leading to bypass of security features...

CVE-2018-8567

CVE-2018-8567 is an elevation of privilege in Microsoft Edge caused by insufficient enforcement of cross-domain policies. An attacker could craft a web-based scenario (hosted or compromised sites) to entice a user to visit content that exploits cross-domain information leakage to inject data into...

CVE-2019-0565

CVE-2019-0565 is a remote code execution vulnerability in Microsoft Edge caused by improper handling of in-memory objects in the browser. Successful exploitation could allow an attacker to execute arbitrary code in the context of the current user, potentially granting the attacker the user’s righ...

CVE-2019-0605

Technical details about CVE-2019-0605 are not present in the provided documents; no specifics on affected products, root cause, or fixes. Monitor for updates from official sources.

CVE-2019-0643

CVE-2019-0643 is an information‑disclosure vulnerability in Microsoft Edge where cross-origin requests are handled in a way that could allow an attacker to determine the origin of all webpages in the affected browser. The issue is addressed by a security update from Microsoft (Edge/IE stack) via ...

CVE-2019-0648

CVE-2019-0648 describes an information-disclosure vulnerability in Chakra (the scripting engine) where memory contents could be exposed if an attacker can locate the memory object. The connected documents consistently tie this to ChakraCore/Edge, noting that the scripting engine does not properly...

CVE-2019-0655

Technical details for CVE-2019-0655 are not publicly provided in the supplied documents. Connected EUVD entries mention malware labels but do not specify affected product, root cause, impact, or remediation. Monitor for updates.

CVE-2019-0990

Technical details for CVE-2019-0990 are not provided in the connected documents. Monitor for updates from official advisories.

CVE-2020-1059

CVE-2020-1059 describes a spoofing vulnerability in Microsoft Edge where improper parsing of HTTP content could allow an attacker to redirect a user to a malicious website. The Microsoft description specifies that exploitation requires the user to click a specially crafted URL (phish-like scenari...

CVE-2015-2442

The CVE-2015-2442 entry concerns Microsoft Internet Explorer (IE) versions 8–11 and Edge, described as a memory corruption vulnerability that allows remote code execution or denial of service when a user visits a crafted site. The description explicitly labels it as a Memory Corruption Vulnerabil...

CVE-2015-6088

CVE-2015-6088 affects Internet Explorer 9–11 and Microsoft Edge, enabling remote ASLR bypass via a crafted webpage. The issue is addressed by MS15-112 (IE) and MS15-113 (Edge). Remediation: apply the Microsoft security updates referenced in the connected MSB advisories (MS15-112 for IE, MS15-113 ...

CVE-2016-0154

CVE-2016-0154 affects Internet Explorer 9–11 and Microsoft Edge. A memory corruption vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website, due to how browsers handle memory objects. The issue is covered in Microsoft advisories MS16-037...

CVE-2016-1106

CVE-2016-1106 is a use-after-free vulnerability in Adobe Flash Player (affecting Flash 21.0.0.213 and earlier, including components in IE/Edge). The issue is reported to enable arbitrary code execution when processing crafted SWF content; exploits are documented (e.g., in threat reports and advis...

CVE-2016-4115

Technical details for CVE-2016-4115 are not publicly available in the provided documents. No affected products, vulnerable components, impact, or remediation are specified here. Monitor for updates as additional information becomes available.

CVE-2016-7286

CVE-2016-7286: Microsoft Edge scripting engine memory corruption via a crafted web site. Connected docs discuss a related Edge UAF in CVE-2016-7288 (TypedArray.sort in Chakra.dll) with PoC details and analysis, indicating a memory corruption class vulnerability; MS16-145 patch is identified in th...

CVE-2016-7296

The connected material centers on Microsoft Edge memory corruption in scripting/TypedArray handling (MS Edge UAF) with PoC references and code analysis tied to the 2016 CVE family (e.g., CVE-2016-7288, CVE-2016-7286) and Chakra.dll internals. It details how a TypedArray.sort callback can trigger ...

CVE-2017-0227

CVE-2017-0227 describes a remote code execution in Microsoft Edge caused by how the scripting engines render in-memory objects, a memory corruption issue. The linked connected documents identify the vulnerability as part of a trio (CVE-2017-0221, CVE-2017-0227, CVE-2017-0240) with exploitation ti...

CVE-2017-8740

CVE-2017-8740 affects Microsoft Edge on Windows 10 (1703) and is due to memory handling issues in the Edge scripting engine, enabling arbitrary code execution in the current user. A CIRCL/CVE-2017-8740 sighting confirms exploitation with exploits on Exploit DB (e.g., exploits/42764). No patch/ver...

CVE-2018-0856

CVE-2018-0856 concerns a memory‑handling issue in the ChakraCore scripting engine used by Microsoft Edge/Windows 10 (1703, 1709) that enables remote code execution. The connected advisories describe that Edge/ChakraCore’s in‑memory object handling can be exploited to run arbitrary code, but they ...

CVE-2018-0927

CVE-2018-0927 relates to an information disclosure in Microsoft browsers (Internet Explorer and Edge) due to how objects are handled in memory. The connected Microsoft KBs (March 2018 updates) describe IE security updates that address multiple memory- and rendering-related issues, including fixes...

CVE-2018-1019

CVE-2018-1019 describes a remote code execution vulnerability in the Chakra scripting engine’s handling of objects in memory, affecting Microsoft Edge and ChakraCore. The connected GitHub advisories reiterate a “ChakraCore RCE Vulnerability” with the same memory-corruption vector but do not provi...

CVE-2018-8266

CVE-2018-8266 describes a remote code execution vulnerability in Microsoft Edge stemming from memory handling of objects in the Chakra scripting engine (ChakraCore). Affected products are Microsoft Edge and ChakraCore. The underlying issue is memory corruption within Chakra’s object handling, lea...