CVE-2018-1023

Technical details for CVE-2018-1023 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2018-8130

CVE-2018-8130 describes a remote code execution vulnerability in the Chakra Scripting Engine (ChakraCore) used by Microsoft Edge. The issue arises from how objects are handled in memory, leading to memory corruption. Affected products/components include Microsoft Edge and ChakraCore. The metadata...

CVE-2018-8275

CVE-2018-8275 describes a remote code execution in Microsoft Edge due to memory corruption when Edge improperly accesses objects in memory (affecting Edge and ChakraCore). The vulnerability is rated HIGH (CVSS v3.0: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). AFFECTED COMPONENTS: Microsoft Edge; Chakra...

CVE-2019-0565

CVE-2019-0565 is a remote code execution vulnerability in Microsoft Edge caused by improper handling of in-memory objects in the browser. Successful exploitation could allow an attacker to execute arbitrary code in the context of the current user, potentially granting the attacker the user’s righ...

CVE-2019-0648

CVE-2019-0648 describes an information-disclosure vulnerability in Chakra (the scripting engine) where memory contents could be exposed if an attacker can locate the memory object. The connected documents consistently tie this to ChakraCore/Edge, noting that the scripting engine does not properly...

CVE-2019-0649

CVE-2019-0649 describes a vulnerability in Microsoft Chakra JIT server (Scripting Engine) that could enable elevation of privileges. The Microsoft security guidance notes that the flaw is addressed by altering how Chakra handles constructorCaches, with updates provided by multiple KB/MSRC advisor...

CVE-2019-1054

CVE-2019-1054 is a Microsoft Edge vulnerability a security feature bypass, specifically bypassing Mark of the Web (MOTW) tagging. The underlying issue is Edge’s handling of MOTW, which could allow a user to be exposed to a bypass of multiple security technologies if MOTW isn’t set. Affected produ...

CVE-2019-1413

CVE-2019-1413 : Microsoft Edge security feature bypass (EdgeHTML-based). The vulnerability arises because Edge improperly handles extension requests and fails to request host permission for all_urls, exposing a potential security bypass. CVSS v3.1 base score: 4.3 (MEDIUM). No exploits or remediat...

CVE-2016-1106

CVE-2016-1106 is a use-after-free vulnerability in Adobe Flash Player (affecting Flash 21.0.0.213 and earlier, including components in IE/Edge). The issue is reported to enable arbitrary code execution when processing crafted SWF content; exploits are documented (e.g., in threat reports and advis...

CVE-2016-3297

CVE-2016-3297 affects Microsoft Internet Explorer 9–11 and Microsoft Edge. The vulnerability is a memory corruption issue in how browsers handle objects, enabling remote code execution when a user visits a crafted site. Impact could include full user rights compromise; in some contexts memory cor...

CVE-2016-4108

CVE-2016-4108 is a use-after-free flaw in Adobe Flash Player affecting Flash Player 21.0.0.213 and earlier (as used in IE/Edge). Attack vectors are not specified in the description; exploitation is noted in some sources (e.g., CIRCL/Exploits DB). The issue is linked with multiple related CVEs and...

CVE-2016-4111

Technical details for CVE-2016-4111 are not publicly provided in the supplied documents. Monitor for updates; current materials do not reveal affected products, root cause, or fixes for this entry.

CVE-2017-11803

CVE-2017-11803 affects Microsoft Edge on Windows 10 (versions 1703 and 1709) and Windows Server 1709. It is an information-disclosure vulnerability caused by how Edge handles objects in memory, enabling an attacker to obtain information to further compromise the user’s system. The CVSSv3 base sco...

CVE-2017-11804

CVE-2017-11804 affects ChakraCore and Microsoft Edge on Windows 10 (Gold/1511/1607/1703) and Windows Server 2016. The root cause is how the scripting engine manages in-memory objects, enabling an attacker to execute arbitrary code in the context of the current user. The linked advisories confirm ...

CVE-2017-8596

CVE-2017-8596 affects Microsoft Edge on Windows 10 1607/1703 and Windows Server 2016. The issue is a remote memory corruption in the Chakra JavaScript engine when rendering objects in memory, enabling code execution in the context of the current user. CVSS data from NVD indicates high risk (AV:N/...

CVE-2017-8602

CVE-2017-8602 affects Microsoft browsers on Windows (multiple editions listed in the CVE entry) and is a spoofing vulnerability in how HTTP content is parsed. The connected documents (Nessus/OpenVAS plugins) confirm the issue is tied to the browser parsing logic (HTTP content) and impact is spoof...

CVE-2017-8731

Microsoft Edge Memory Corruption vulnerability (CVE-2017-8731) affects Microsoft Edge on Windows 10 1607 and Windows Server 2016. The issue arises from how Edge accesses objects in memory, allowing an attacker to execute arbitrary code in the context of the current user when a victim opens a spec...

CVE-2017-8740

CVE-2017-8740 affects Microsoft Edge on Windows 10 (1703) and is due to memory handling issues in the Edge scripting engine, enabling arbitrary code execution in the current user. A CIRCL/CVE-2017-8740 sighting confirms exploitation with exploits on Exploit DB (e.g., exploits/42764). No patch/ver...

CVE-2018-0800

CVE-2018-0800 refers to an Information Disclosure in the Microsoft Edge scripting engine on Windows 10 version 1709, due to how the Edge scripting engine handles objects in memory. The CNVD entries describe an information-disclosure vulnerability in the Edge scripting engine (affecting Windows 10...

CVE-2018-0856

CVE-2018-0856 concerns a memory‑handling issue in the ChakraCore scripting engine used by Microsoft Edge/Windows 10 (1703, 1709) that enables remote code execution. The connected advisories describe that Edge/ChakraCore’s in‑memory object handling can be exploited to run arbitrary code, but they ...

CVE-2018-0927

CVE-2018-0927 relates to an information disclosure in Microsoft browsers (Internet Explorer and Edge) due to how objects are handled in memory. The connected Microsoft KBs (March 2018 updates) describe IE security updates that address multiple memory- and rendering-related issues, including fixes...

CVE-2018-8503

CVE-2018-8503 is discussed across multiple security entries linked to ChakraCore/Microsoft Edge, describing a remote code execution in the Chakra scripting engine due to memory handling of objects. The connected advisories (GHSA entries) and EUVD records identify this family as ChakraCore/RCE vul...

CVE-2018-8545

CVE-2018-8545 is an information-disclosure vulnerability in Microsoft Edge where cross-origin requests are mishandled, allowing an attacker to determine the origin of all webpages in the affected browser. Affected product: Microsoft Edge (Edge/ChakraCore-related components cited in multiple advis...

CVE-2021-38641

CVE-2021-38641 affects Microsoft Edge for Android. The issue is described as a Spoofing Vulnerability in Edge for Android. Publicly documented details in connected sources indicate that fixes have been released for Microsoft Edge (including Edge for Android) and that users should install updates ...

CVE-2015-2542

Mode C: CVE-2015-2542 affects Microsoft Edge and Internet Explorer 10/11. The vulnerability is described as memory corruption triggered by a crafted web site, enabling remote code execution or a denial of service. Connected records identify affected products as Microsoft Edge/IE, with root cause ...

CVE-2016-0155

Microsoft Edge memory corruption vulnerabilities (CVE-2016-0155/0156/0157) allow remote code execution or memory corruption via crafted web content. Root cause is improper memory access in Edge's handling of web content. Affected product: Microsoft Edge (Windows 10). Impact: arbitrary code execut...

CVE-2016-7282

Technical details for CVE-2016-7282 are not provided in the connected documents. Public details (affected product/version, root cause, exploit info, and fixes) are not disclosed here; monitor official bulletins for updates.

CVE-2017-0208

CVE-2017-0208 describes an information disclosure in Microsoft Edge (Chakra scripting engine) caused by improper handling of in-memory objects. The vulnerability could allow an attacker to obtain information to further compromise the system. Documents confirm the issue is tied to the Scripting En...

CVE-2017-0227

CVE-2017-0227 describes a remote code execution in Microsoft Edge caused by how the scripting engines render in-memory objects, a memory corruption issue. The linked connected documents identify the vulnerability as part of a trio (CVE-2017-0221, CVE-2017-0227, CVE-2017-0240) with exploitation ti...

CVE-2017-11805

CVE-2017-11805 affects ChakraCore and Microsoft Edge on Windows 10 1703. Root cause: memory handling by the Chakra scripting engine leading to memory corruption. Impact: attacker can execute arbitrary code in the current user context. Public exploits exist (e.g., Exploit-DB IDs 43367/43368) per l...

CVE-2017-8644

CVE-2017-8644 concerns an information disclosure vulnerability in Microsoft Edge on Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016, arising from how Edge handles objects in memory. The connected sources confirm the affected component is Edge and describe memory-object handling as the...

CVE-2018-0836

The CVE-2018-0836 entry concerns Microsoft Edge and ChakraCore in Windows 10 (1703/1709) where remote code execution is possible due to how the scripting engine handles objects in memory (Scripting Engine Memory Corruption). Connected advisories (GHSA) corroborate a ChakraCore RCE vulnerability a...

CVE-2018-0861

The CVE-2018-0861 entry concerns a memory corruption flaw in the scripting engine used by Microsoft Edge and ChakraCore, leading to remote code execution. Affected software/products mentioned across connected documents include Microsoft Edge and ChakraCore on Windows 10 (Gold/1511/1607/1703/1709)...

CVE-2018-0931

CVE-2018-0931 concerns the ChakraCore memory handling in the Chakra scripting engine, leading to remote code execution on Windows 10 variants (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016. The connected GitHub advisories (GHSA-6C2V-XC8F-FVF7, GHSA-6V8R-83V3-RMRF, GHSA-PHCC-FRH9-Q545, GHS...

CVE-2018-8286

CVE-2018-8286 is a remote code execution vulnerability in the Chakra scripting engine, affecting Microsoft Edge and ChakraCore. The issue stems from how the Chakra engine handles objects in memory, described in connected GitHub advisories as the “Chakra Scripting Engine Memory Corruption Vulnerab...

CVE-2019-0654

Technical details about CVE-2019-0654 are not publicly available in the provided documents. Monitor for updates from official advisories for affected products, impact, and fixes.

CVE-2016-1101

CVE-2016-1101 is a Flash Player vulnerability (heap buffer overflow) affecting Adobe Flash Player up to 21.0.0.x and the Flash libraries in IE/Edge. Public advisories and vendor notes describe a heap-buffer-overflow/ memory-corruption issue in Flash parsing, enabling remote code execution as part...

CVE-2016-3389

The CVE-2016-3389 entry concerns the Chakra JavaScript engine in Microsoft Edge. It describes memory corruption that can allow remote attackers to execute arbitrary code or cause a denial of service via a crafted website. The connected advisories reiterate the same description but do not provide ...

CVE-2017-0233

CVE-2017-0233 is an elevation of privilege vulnerability in Microsoft Edge that could allow escaping the AppContainer sandbox. The entry notes it is distinct from CVE-2017-0241 and lists a CVSS v3 base score of 8.3 (HIGH) with NETWORK attack vector, HIGH attack complexity, and user interaction re...

CVE-2017-8604

CVE-2017-8604 is a Microsoft Edge scripting engine remote memory corruption vulnerability affecting Windows 10 (versions 1511, 1607, 1703) and Windows Server 2016. The issue arises when the JavaScript engine fails to render or handles memory objects, enabling an attacker to execute arbitrary code...

CVE-2017-8738

CVE-2017-8738 : A remote code execution vulnerability in Microsoft Edge’s scripting engine on Windows 10 (Gold, 1511, 1607) and Windows Server 2016. Root cause: memory objects are mishandled by the Edge scripting engine, allowing memory corruption and code execution in the current user context. A...

CVE-2017-8751

CVE-2017-8751 affects Microsoft Edge in Windows 10 (1703). Root cause: Edge’s handling of objects in memory leading to memory corruption. Impact: attacker can execute arbitrary code in the context of the current user. Exploitation note: exploits exist (e.g., exploit-db entry) per linked reference...

CVE-2018-8463

CVE-2018-8463 affects Microsoft Edge and describes an elevation-of-privilege vulnerability that could allow escaping the AppContainer sandbox in the browser. The available documents confirm a sandbox-escape issue in Edge with associated exploit references (e.g., Exploit DB) and command-execution ...

CVE-2018-8541

The CVE-2018-8541 issue is a Chakra scripting engine memory corruption vulnerability affecting Microsoft Edge and ChakraCore. Connected sources reiterate RCE via memory-handling of objects, with network exploitation and user interaction required per CVSSv3; no specific patch version or exploit de...

CVE-2019-0634

Technical details about CVE-2019-0634 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2016-1103

CVE-2016-1103 is a Flash Player vulnerability described as a buffer overflow in the Flash components (Flash Player/Flash plugin) that could lead to code execution. Multiple advisories (APSB16-15) and vendor notes tie it to parsing of crafted SWF content, with public exploits available. Affected p...

CVE-2017-0203

CVE-2017-0203 involves a vulnerability in Microsoft Edge where the Edge Content Security Policy (CSP) fails to validate certain crafted documents, allowing an attacker to entice a user to load a page with malicious content. Affected product: Microsoft Edge; root cause: CSP validation weakness in ...

CVE-2017-0252

CVE-2017-0252 is a Chakra Core (ChakraEngine) RCE vulnerability in Microsoft Edge’s JavaScript engine, caused by how in-memory objects are rendered, enabling remote code execution. Connected advisories (GHSA/GHSA-448H, CNVD, MSRC) corroborate memory-corruption-based RCE in ChakraCore. Impact is h...

CVE-2017-11798

CVE-2017-11798 affects Microsoft Edge on Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. The vulnerability stems from how the scripting engine handles objects in memory, enabling an attacker to execute arbitrary code in the context of the current user. The CVSS metrics from the initi...

CVE-2017-11872

CVE-2017-11872 affects Microsoft Edge on Windows 10 (1607, 1703) and Windows Server 2016. The issue arises from how Edge handles redirect requests, allowing an attacker to force the browser to send data to a destination of the attacker’s choice. Connected sources corroborate related Edge security...