CVE-2017-0241

Mode C: CVE-2017-0241 affects Microsoft Edge. The vulnerability is an elevation of privilege when Edge renders a domain-less URL, allowing actions in the Intranet Zone. Affected component: Edge rendering/domain handling; root cause details are not fully enumerated in the provided docs beyond the ...

CVE-2017-11805

CVE-2017-11805 affects ChakraCore and Microsoft Edge on Windows 10 1703. Root cause: memory handling by the Chakra scripting engine leading to memory corruption. Impact: attacker can execute arbitrary code in the current user context. Public exploits exist (e.g., Exploit-DB IDs 43367/43368) per l...

CVE-2017-8520

CVE-2017-8520 is described in connected docs as a remote code execution vulnerability in the Microsoft Edge scripting engine on Windows 10 version 1703, caused by improper handling of objects in memory. The CNVD entry for CVE-2017-16997 notes a remote memory corruption exploit, with Edge as the a...

CVE-2017-8644

CVE-2017-8644 concerns an information disclosure vulnerability in Microsoft Edge on Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016, arising from how Edge handles objects in memory. The connected sources confirm the affected component is Edge and describe memory-object handling as the...

CVE-2017-8652

CVE-2017-8652 is an information-disclosure/use-after-free vulnerability in Microsoft Edge on Windows 10 Gold/1511/1607/1703 and Windows Server 2016. The connected sources describe it as Edge memory-objects handling in which an attacker could disclose information. The Nessus/plugin notes this CVE ...

CVE-2017-8670

CVE-2017-8670 describes a remote code execution vulnerability in Microsoft Edge on Windows 10 and Windows Server 2016 where the scripting engine memory corruption occurs when handling in-memory objects during rendering. The root cause is a memory corruption flaw in the browser’s JavaScript engine...

CVE-2018-8351

CVE-2018-8351 is an information-disclosure vulnerability in affected Microsoft browsers (Internet Explorer 11, Edge, and Internet Explorer 10) caused by improper cross-frame interaction. The NVD and related records describe the issue as a cross-frame interaction flaw enabling partial confidential...

CVE-2018-8512

CVE-2018-8512 describes a security feature bypass in Microsoft Edge where the Edge Content Security Policy (CSP) fails to properly validate certain specially crafted documents. Affected product: Microsoft Edge. Root cause (as stated): CSP validation weakness leading to bypass of security features...

CVE-2015-2442

The CVE-2015-2442 entry concerns Microsoft Internet Explorer (IE) versions 8–11 and Edge, described as a memory corruption vulnerability that allows remote code execution or denial of service when a user visits a crafted site. The description explicitly labels it as a Memory Corruption Vulnerabil...

CVE-2015-6088

CVE-2015-6088 affects Internet Explorer 9–11 and Microsoft Edge, enabling remote ASLR bypass via a crafted webpage. The issue is addressed by MS15-112 (IE) and MS15-113 (Edge). Remediation: apply the Microsoft security updates referenced in the connected MSB advisories (MS15-112 for IE, MS15-113 ...

CVE-2016-4111

Technical details for CVE-2016-4111 are not publicly provided in the supplied documents. Monitor for updates; current materials do not reveal affected products, root cause, or fixes for this entry.

CVE-2016-7286

CVE-2016-7286: Microsoft Edge scripting engine memory corruption via a crafted web site. Connected docs discuss a related Edge UAF in CVE-2016-7288 (TypedArray.sort in Chakra.dll) with PoC details and analysis, indicating a memory corruption class vulnerability; MS16-145 patch is identified in th...

CVE-2017-0017

CVE-2017-0017 affects Microsoft Edge where the RegEx class in the XSS filter can be exploited to conduct cross-site scripting and obtain sensitive information via unspecified vectors. The description notes this is distinct from other CVEs in the same year. The connected documents do not provide c...

CVE-2017-11874

Microsoft Edge in Windows 10 (1703, 1709), Windows Server (1709) and ChakraCore is affected by a CFG bypass that allows arbitrary code execution due to how memory is accessed by code produced by the Edge JIT compiler. The vulnerability impacts Edge/CSP handling and CFG enforcement; CVE-2017-11874...

CVE-2017-8602

CVE-2017-8602 affects Microsoft browsers on Windows (multiple editions listed in the CVE entry) and is a spoofing vulnerability in how HTTP content is parsed. The connected documents (Nessus/OpenVAS plugins) confirm the issue is tied to the browser parsing logic (HTTP content) and impact is spoof...

CVE-2017-8671

CVE-2017-8671 describes a remote code execution vulnerability in Microsoft Edge’s scripting engine (Chakra) for Windows 10 1511/1607/1703 and Windows Server 2016. The root cause is memory corruption when handling objects in memory during JavaScript rendering, allowing an attacker to execute arbit...

CVE-2018-8128

CVE-2018-8128 is described here as a remote code execution vulnerability in the Microsoft Edge scripting engine related to memory handling, affecting Edge and ChakraCore. The Connected documents (GHSA advisories) reiterate a ChakraCore/Edge memory corruption RCE issue, listing CVE-2018-8128 among...

CVE-2018-8130

CVE-2018-8130 describes a remote code execution vulnerability in the Chakra Scripting Engine (ChakraCore) used by Microsoft Edge. The issue arises from how objects are handled in memory, leading to memory corruption. Affected products/components include Microsoft Edge and ChakraCore. The metadata...

CVE-2018-8290

The connected sources describe CVE-2018-8290 as a remote code execution in the Chakra scripting engine’s memory handling, affecting Microsoft Edge and ChakraCore. The vulnerability arises from how Chakra handles objects in memory, labeled as a memory corruption vulnerability (Chakra Scripting Eng...

CVE-2018-8503

CVE-2018-8503 is discussed across multiple security entries linked to ChakraCore/Microsoft Edge, describing a remote code execution in the Chakra scripting engine due to memory handling of objects. The connected advisories (GHSA entries) and EUVD records identify this family as ChakraCore/RCE vul...

CVE-2018-8567

CVE-2018-8567 is an elevation of privilege in Microsoft Edge caused by insufficient enforcement of cross-domain policies. An attacker could craft a web-based scenario (hosted or compromised sites) to entice a user to visit content that exploits cross-domain information leakage to inject data into...

CVE-2015-2542

Mode C: CVE-2015-2542 affects Microsoft Edge and Internet Explorer 10/11. The vulnerability is described as memory corruption triggered by a crafted web site, enabling remote code execution or a denial of service. Connected records identify affected products as Microsoft Edge/IE, with root cause ...

CVE-2016-3289

CVE-2016-3289 affects Microsoft Internet Explorer 11 and Microsoft Edge. The issue is a memory corruption vulnerability in the browser when handling memory objects, which an attacker can exploit via a crafted webpage to achieve remote code execution or a denial of service. Connected CNVD entries ...

CVE-2017-8595

CVE-2017-8595 is a memory-corruption vulnerability in Microsoft Edge’s scripting engine on Windows 10/Server 2016, where improper handling of in-memory objects can lead to arbitrary code execution with the current user’s privileges. The connected sources indicate Edge’s JavaScript engine memory h...

CVE-2018-0943

The provided connected advisories identify a memory handling issue in the Chakra scripting engine (ChakraCore) that can lead to remote code execution or information disclosure in Microsoft Edge/IE. Description across sources consistently cites improper memory handling in Chakra objects as the roo...

CVE-2018-1019

CVE-2018-1019 describes a remote code execution vulnerability in the Chakra scripting engine’s handling of objects in memory, affecting Microsoft Edge and ChakraCore. The connected GitHub advisories reiterate a “ChakraCore RCE Vulnerability” with the same memory-corruption vector but do not provi...

CVE-2018-1023

Technical details for CVE-2018-1023 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2018-8280

CVE-2018-8280 and related Chakra memory-corruption issues affect Microsoft Edge and ChakraCore. The vulnerability arises from how the Chakra scripting engine handles objects in memory, enabling remote code execution. The connected advisories (GHSA entries and NVD/CVE records) confirm a Chakra mem...

CVE-2018-8456

CVE-2018-8456 affects Microsoft Edge and ChakraCore. The vulnerability arises from how the ChakraCore scripting engine handles memory objects, enabling remote code execution. The CVSS metrics show HIGH severity with network attack vector, high complexity, no privileges required, user interaction ...

CVE-2018-8545

CVE-2018-8545 is an information-disclosure vulnerability in Microsoft Edge where cross-origin requests are mishandled, allowing an attacker to determine the origin of all webpages in the affected browser. Affected product: Microsoft Edge (Edge/ChakraCore-related components cited in multiple advis...

CVE-2019-0643

CVE-2019-0643 is an information‑disclosure vulnerability in Microsoft Edge where cross-origin requests are handled in a way that could allow an attacker to determine the origin of all webpages in the affected browser. The issue is addressed by a security update from Microsoft (Edge/IE stack) via ...

CVE-2019-0654

Technical details about CVE-2019-0654 are not publicly available in the provided documents. Monitor for updates from official advisories for affected products, impact, and fixes.

CVE-2019-1023

CVE-2019-1023 describes an information disclosure vulnerability in Microsoft Edge and the ChakraCore JavaScript engine. The CNVD entry notes a vulnerability arising from a configuration or other error in operation, allowing an unauthorized attacker to obtain sensitive information. The NVD descrip...

CVE-2020-1059

CVE-2020-1059 describes a spoofing vulnerability in Microsoft Edge where improper parsing of HTTP content could allow an attacker to redirect a user to a malicious website. The Microsoft description specifies that exploitation requires the user to click a specially crafted URL (phish-like scenari...

CVE-2021-38641

CVE-2021-38641 affects Microsoft Edge for Android. The issue is described as a Spoofing Vulnerability in Edge for Android. Publicly documented details in connected sources indicate that fixes have been released for Microsoft Edge (including Edge for Android) and that users should install updates ...

CVE-2015-6142

CVE-2015-6142 concerns memory corruption in Microsoft Internet Explorer 11 and Microsoft Edge triggered by visiting a crafted web site, classified as a high-severity remote code execution/DoS risk. The vulnerability is referenced alongside other IE/Edge memory-corruption CVEs and is addressed by ...

CVE-2017-0233

CVE-2017-0233 is an elevation of privilege vulnerability in Microsoft Edge that could allow escaping the AppContainer sandbox. The entry notes it is distinct from CVE-2017-0241 and lists a CVSS v3 base score of 8.3 (HIGH) with NETWORK attack vector, HIGH attack complexity, and user interaction re...

CVE-2017-0252

CVE-2017-0252 is a Chakra Core (ChakraEngine) RCE vulnerability in Microsoft Edge’s JavaScript engine, caused by how in-memory objects are rendered, enabling remote code execution. Connected advisories (GHSA/GHSA-448H, CNVD, MSRC) corroborate memory-corruption-based RCE in ChakraCore. Impact is h...

CVE-2017-11804

CVE-2017-11804 affects ChakraCore and Microsoft Edge on Windows 10 (Gold/1511/1607/1703) and Windows Server 2016. The root cause is how the scripting engine manages in-memory objects, enabling an attacker to execute arbitrary code in the context of the current user. The linked advisories confirm ...

CVE-2017-8655

CVE-2017-8655 is a Microsoft Edge memory corruption vulnerability in Windows 10/Server 2016 where the JS engine misrenders objects in memory, enabling remote code execution in the caller’s context. The description and connected Nessus advisories confirm impact on Edge’s scripting engine across mu...

CVE-2017-8740

CVE-2017-8740 affects Microsoft Edge on Windows 10 (1703) and is due to memory handling issues in the Edge scripting engine, enabling arbitrary code execution in the current user. A CIRCL/CVE-2017-8740 sighting confirms exploitation with exploits on Exploit DB (e.g., exploits/42764). No patch/ver...

CVE-2018-0800

CVE-2018-0800 refers to an Information Disclosure in the Microsoft Edge scripting engine on Windows 10 version 1709, due to how the Edge scripting engine handles objects in memory. The CNVD entries describe an information-disclosure vulnerability in the Edge scripting engine (affecting Windows 10...

CVE-2018-8403

CVE-2018-8403 is a remote code execution vulnerability in how Microsoft browsers access objects in memory (the Microsoft Browser Memory Corruption Vulnerability). Affected products include Internet Explorer 11, Microsoft Edge, and Internet Explorer 10. Root cause is memory corruption when handlin...

CVE-2018-8463

CVE-2018-8463 affects Microsoft Edge and describes an elevation-of-privilege vulnerability that could allow escaping the AppContainer sandbox in the browser. The available documents confirm a sandbox-escape issue in Edge with associated exploit references (e.g., Exploit DB) and command-execution ...

CVE-2018-8541

The CVE-2018-8541 issue is a Chakra scripting engine memory corruption vulnerability affecting Microsoft Edge and ChakraCore. Connected sources reiterate RCE via memory-handling of objects, with network exploitation and user interaction required per CVSSv3; no specific patch version or exploit de...

CVE-2016-0154

CVE-2016-0154 affects Internet Explorer 9–11 and Microsoft Edge. A memory corruption vulnerability allows remote attackers to execute arbitrary code or cause a denial of service via a crafted website, due to how browsers handle memory objects. The issue is covered in Microsoft advisories MS16-037...

CVE-2016-1103

CVE-2016-1103 is a Flash Player vulnerability described as a buffer overflow in the Flash components (Flash Player/Flash plugin) that could lead to code execution. Multiple advisories (APSB16-15) and vendor notes tie it to parsing of crafted SWF content, with public exploits available. Affected p...

CVE-2016-7296

The connected material centers on Microsoft Edge memory corruption in scripting/TypedArray handling (MS Edge UAF) with PoC references and code analysis tied to the 2016 CVE family (e.g., CVE-2016-7288, CVE-2016-7286) and Chakra.dll internals. It details how a TypedArray.sort callback can trigger ...

CVE-2017-0203

CVE-2017-0203 involves a vulnerability in Microsoft Edge where the Edge Content Security Policy (CSP) fails to validate certain crafted documents, allowing an attacker to entice a user to load a page with malicious content. Affected product: Microsoft Edge; root cause: CSP validation weakness in ...

CVE-2017-0227

CVE-2017-0227 describes a remote code execution in Microsoft Edge caused by how the scripting engines render in-memory objects, a memory corruption issue. The linked connected documents identify the vulnerability as part of a trio (CVE-2017-0221, CVE-2017-0227, CVE-2017-0240) with exploitation ti...