CVE-2018-1019

CVE-2018-1019 describes a remote code execution vulnerability in the Chakra scripting engine’s handling of objects in memory, affecting Microsoft Edge and ChakraCore. The connected GitHub advisories reiterate a “ChakraCore RCE Vulnerability” with the same memory-corruption vector but do not provi...

CVE-2018-1023

Technical details for CVE-2018-1023 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2018-8315

CVE-2018-8315 is an information-disclosure vulnerability in the browser scripting engine. Affected components include ChakraCore, Internet Explorer 11, Microsoft Edge, and Internet Explorer 10, where improper handling of object types leads to partial confidentiality/integrity impact. The CVE’s ba...

CVE-2018-8503

CVE-2018-8503 is discussed across multiple security entries linked to ChakraCore/Microsoft Edge, describing a remote code execution in the Chakra scripting engine due to memory handling of objects. The connected advisories (GHSA entries) and EUVD records identify this family as ChakraCore/RCE vul...

CVE-2018-8545

CVE-2018-8545 is an information-disclosure vulnerability in Microsoft Edge where cross-origin requests are mishandled, allowing an attacker to determine the origin of all webpages in the affected browser. Affected product: Microsoft Edge (Edge/ChakraCore-related components cited in multiple advis...

CVE-2019-0565

CVE-2019-0565 is a remote code execution vulnerability in Microsoft Edge caused by improper handling of in-memory objects in the browser. Successful exploitation could allow an attacker to execute arbitrary code in the context of the current user, potentially granting the attacker the user’s righ...

CVE-2019-1413

CVE-2019-1413 : Microsoft Edge security feature bypass (EdgeHTML-based). The vulnerability arises because Edge improperly handles extension requests and fails to request host permission for all_urls, exposing a potential security bypass. CVSS v3.1 base score: 4.3 (MEDIUM). No exploits or remediat...

CVE-2026-66310

Microsoft Edge for Android is affected by CVE-2026-66310, described as external control of a file name or path that allows an unauthorized local attacker to disclose information. The vulnerability is labeled with CVSS v3.1 base score 7.7 (HIGH), with attack vector LOCAL, all else equal; no user i...

CVE-2015-2442

The CVE-2015-2442 entry concerns Microsoft Internet Explorer (IE) versions 8–11 and Edge, described as a memory corruption vulnerability that allows remote code execution or denial of service when a user visits a crafted site. The description explicitly labels it as a Memory Corruption Vulnerabil...

CVE-2016-0155

Microsoft Edge memory corruption vulnerabilities (CVE-2016-0155/0156/0157) allow remote code execution or memory corruption via crafted web content. Root cause is improper memory access in Edge's handling of web content. Affected product: Microsoft Edge (Windows 10). Impact: arbitrary code execut...

CVE-2016-1106

CVE-2016-1106 is a use-after-free vulnerability in Adobe Flash Player (affecting Flash 21.0.0.213 and earlier, including components in IE/Edge). The issue is reported to enable arbitrary code execution when processing crafted SWF content; exploits are documented (e.g., in threat reports and advis...

CVE-2016-4108

CVE-2016-4108 is a use-after-free flaw in Adobe Flash Player affecting Flash Player 21.0.0.213 and earlier (as used in IE/Edge). Attack vectors are not specified in the description; exploitation is noted in some sources (e.g., CIRCL/Exploits DB). The issue is linked with multiple related CVEs and...

CVE-2016-7282

Technical details for CVE-2016-7282 are not provided in the connected documents. Public details (affected product/version, root cause, exploit info, and fixes) are not disclosed here; monitor official bulletins for updates.

CVE-2017-0208

CVE-2017-0208 describes an information disclosure in Microsoft Edge (Chakra scripting engine) caused by improper handling of in-memory objects. The vulnerability could allow an attacker to obtain information to further compromise the system. Documents confirm the issue is tied to the Scripting En...

CVE-2017-0227

CVE-2017-0227 describes a remote code execution in Microsoft Edge caused by how the scripting engines render in-memory objects, a memory corruption issue. The linked connected documents identify the vulnerability as part of a trio (CVE-2017-0221, CVE-2017-0227, CVE-2017-0240) with exploitation ti...

CVE-2017-11803

CVE-2017-11803 affects Microsoft Edge on Windows 10 (versions 1703 and 1709) and Windows Server 1709. It is an information-disclosure vulnerability caused by how Edge handles objects in memory, enabling an attacker to obtain information to further compromise the user’s system. The CVSSv3 base sco...

CVE-2017-11805

CVE-2017-11805 affects ChakraCore and Microsoft Edge on Windows 10 1703. Root cause: memory handling by the Chakra scripting engine leading to memory corruption. Impact: attacker can execute arbitrary code in the current user context. Public exploits exist (e.g., Exploit-DB IDs 43367/43368) per l...

CVE-2017-8548

CVE-2017-8548 affects Microsoft Edge in Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. It describes improper handling of in-memory objects in Edge’s scripting engine, causing memory corruption and information disclosure that could aid system compromise. A public exploit has been lin...

CVE-2017-8602

CVE-2017-8602 affects Microsoft browsers on Windows (multiple editions listed in the CVE entry) and is a spoofing vulnerability in how HTTP content is parsed. The connected documents (Nessus/OpenVAS plugins) confirm the issue is tied to the browser parsing logic (HTTP content) and impact is spoof...

CVE-2017-8655

CVE-2017-8655 is a Microsoft Edge memory corruption vulnerability in Windows 10/Server 2016 where the JS engine misrenders objects in memory, enabling remote code execution in the caller’s context. The description and connected Nessus advisories confirm impact on Edge’s scripting engine across mu...

CVE-2018-0778

Technical details for CVE-2018-0778 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2018-0856

CVE-2018-0856 concerns a memory‑handling issue in the ChakraCore scripting engine used by Microsoft Edge/Windows 10 (1703, 1709) that enables remote code execution. The connected advisories describe that Edge/ChakraCore’s in‑memory object handling can be exploited to run arbitrary code, but they ...

CVE-2018-0861

The CVE-2018-0861 entry concerns a memory corruption flaw in the scripting engine used by Microsoft Edge and ChakraCore, leading to remote code execution. Affected software/products mentioned across connected documents include Microsoft Edge and ChakraCore on Windows 10 (Gold/1511/1607/1703/1709)...

CVE-2018-0927

CVE-2018-0927 relates to an information disclosure in Microsoft browsers (Internet Explorer and Edge) due to how objects are handled in memory. The connected Microsoft KBs (March 2018 updates) describe IE security updates that address multiple memory- and rendering-related issues, including fixes...

CVE-2018-8286

CVE-2018-8286 is a remote code execution vulnerability in the Chakra scripting engine, affecting Microsoft Edge and ChakraCore. The issue stems from how the Chakra engine handles objects in memory, described in connected GitHub advisories as the “Chakra Scripting Engine Memory Corruption Vulnerab...

CVE-2018-8351

CVE-2018-8351 is an information-disclosure vulnerability in affected Microsoft browsers (Internet Explorer 11, Edge, and Internet Explorer 10) caused by improper cross-frame interaction. The NVD and related records describe the issue as a cross-frame interaction flaw enabling partial confidential...

CVE-2021-38641

CVE-2021-38641 affects Microsoft Edge for Android. The issue is described as a Spoofing Vulnerability in Edge for Android. Publicly documented details in connected sources indicate that fixes have been released for Microsoft Edge (including Edge for Android) and that users should install updates ...

CVE-2015-2542

Mode C: CVE-2015-2542 affects Microsoft Edge and Internet Explorer 10/11. The vulnerability is described as memory corruption triggered by a crafted web site, enabling remote code execution or a denial of service. Connected records identify affected products as Microsoft Edge/IE, with root cause ...

CVE-2016-1101

CVE-2016-1101 is a Flash Player vulnerability (heap buffer overflow) affecting Adobe Flash Player up to 21.0.0.x and the Flash libraries in IE/Edge. Public advisories and vendor notes describe a heap-buffer-overflow/ memory-corruption issue in Flash parsing, enabling remote code execution as part...

CVE-2016-3389

The CVE-2016-3389 entry concerns the Chakra JavaScript engine in Microsoft Edge. It describes memory corruption that can allow remote attackers to execute arbitrary code or cause a denial of service via a crafted website. The connected advisories reiterate the same description but do not provide ...

CVE-2017-0233

CVE-2017-0233 is an elevation of privilege vulnerability in Microsoft Edge that could allow escaping the AppContainer sandbox. The entry notes it is distinct from CVE-2017-0241 and lists a CVSS v3 base score of 8.3 (HIGH) with NETWORK attack vector, HIGH attack complexity, and user interaction re...

CVE-2017-8639

CVE-2017-8639 refers to a memory corruption flaw in Microsoft Edge’s scripting engine when rendering objects in memory on Windows 10 (1607/1703) and Windows Server 2016. The issue could allow an attacker to execute arbitrary code in the context of the current user, typically via a web Page that t...

CVE-2017-8644

CVE-2017-8644 concerns an information disclosure vulnerability in Microsoft Edge on Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016, arising from how Edge handles objects in memory. The connected sources confirm the affected component is Edge and describe memory-object handling as the...

CVE-2017-8751

CVE-2017-8751 affects Microsoft Edge in Windows 10 (1703). Root cause: Edge’s handling of objects in memory leading to memory corruption. Impact: attacker can execute arbitrary code in the context of the current user. Exploitation note: exploits exist (e.g., exploit-db entry) per linked reference...

CVE-2018-0836

The CVE-2018-0836 entry concerns Microsoft Edge and ChakraCore in Windows 10 (1703/1709) where remote code execution is possible due to how the scripting engine handles objects in memory (Scripting Engine Memory Corruption). Connected advisories (GHSA) corroborate a ChakraCore RCE vulnerability a...

CVE-2018-0931

CVE-2018-0931 concerns the ChakraCore memory handling in the Chakra scripting engine, leading to remote code execution on Windows 10 variants (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016. The connected GitHub advisories (GHSA-6C2V-XC8F-FVF7, GHSA-6V8R-83V3-RMRF, GHSA-PHCC-FRH9-Q545, GHS...

CVE-2018-8463

CVE-2018-8463 affects Microsoft Edge and describes an elevation-of-privilege vulnerability that could allow escaping the AppContainer sandbox in the browser. The available documents confirm a sandbox-escape issue in Edge with associated exploit references (e.g., Exploit DB) and command-execution ...

CVE-2018-8541

The CVE-2018-8541 issue is a Chakra scripting engine memory corruption vulnerability affecting Microsoft Edge and ChakraCore. Connected sources reiterate RCE via memory-handling of objects, with network exploitation and user interaction required per CVSSv3; no specific patch version or exploit de...

CVE-2019-0634

Technical details about CVE-2019-0634 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2019-1054

CVE-2019-1054 is a Microsoft Edge vulnerability a security feature bypass, specifically bypassing Mark of the Web (MOTW) tagging. The underlying issue is Edge’s handling of MOTW, which could allow a user to be exposed to a bypass of multiple security technologies if MOTW isn’t set. Affected produ...

CVE-2016-4110

CVE-2016-4110 is a use-after-free vulnerability in Adobe Flash Player (and components in related Adobe Flash libraries) that, per connected sources, could lead to arbitrary code execution. Public listings indicate this CVE is part of a set of Flash vulnerabilities fixed in the 2016 updates; multi...

CVE-2017-11798

CVE-2017-11798 affects Microsoft Edge on Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. The vulnerability stems from how the scripting engine handles objects in memory, enabling an attacker to execute arbitrary code in the context of the current user. The CVSS metrics from the initi...

CVE-2017-8657

CVE-2017-8657 affects Microsoft Edge on Windows 10 (versions 1511, 1607, 1703) and Windows Server 2016. The issue is a memory corruption in the browser’s JavaScript engine when rendering objects in memory, allowing remote code execution under the current user. Exploitation is possible via special...

CVE-2017-8738

CVE-2017-8738 : A remote code execution vulnerability in Microsoft Edge’s scripting engine on Windows 10 (Gold, 1511, 1607) and Windows Server 2016. Root cause: memory objects are mishandled by the Edge scripting engine, allowing memory corruption and code execution in the current user context. A...

CVE-2018-0771

The CVE-2018-0771 entry refers to a security feature bypass in Microsoft Edge on Windows 10 (versions 1607 and 1703) and Windows Server 2016, caused by Edge handling of different-origin requests. Connected sources show related Microsoft KB updates (KB4088776 for OS Build 16299.309) delivering sec...

CVE-2018-0951

CVE-2018-0951 describes a remote code execution vulnerability in the Microsoft Edge scripting engine’s handling of in-memory objects. Affected product: Microsoft Edge. Root cause: memory handling issue within the scripting engine leading to memory corruption. Impact as stated: potential remote co...

CVE-2018-8133

CVE-2018-8133 is a remote code execution vulnerability in the Chakra scripting engine’s memory handling, affecting Microsoft Edge and ChakraCore. The root cause is memory corruption within Chakra’s object handling, enabling an attacker to run arbitrary code in the context of the user. Multiple co...

CVE-2018-8290

The connected sources describe CVE-2018-8290 as a remote code execution in the Chakra scripting engine’s memory handling, affecting Microsoft Edge and ChakraCore. The vulnerability arises from how Chakra handles objects in memory, labeled as a memory corruption vulnerability (Chakra Scripting Eng...

CVE-2019-0654

Technical details about CVE-2019-0654 are not publicly available in the provided documents. Monitor for updates from official advisories for affected products, impact, and fixes.

CVE-2019-1030

The CVE-2019-1030 entry concerns an information disclosure in Microsoft Edge (EdgeHTML) where improper in-memory handling of objects could allow an attacker to obtain information to further compromise a user’s system. Exploitation would be web-based: an attacker could host a site or leverage comp...