CVE-2018-0943

The provided connected advisories identify a memory handling issue in the Chakra scripting engine (ChakraCore) that can lead to remote code execution or information disclosure in Microsoft Edge/IE. Description across sources consistently cites improper memory handling in Chakra objects as the roo...

CVE-2018-8137

CVE-2018-8137 is a remote code execution vulnerability in the Microsoft Edge scripting engine (ChakraCore) linked to memory handling of objects. The connected advisories confirm this vulnerability affects Edge and ChakraCore and classify it as remote code execution, but the documents do not provi...

CVE-2018-8541

The CVE-2018-8541 issue is a Chakra scripting engine memory corruption vulnerability affecting Microsoft Edge and ChakraCore. Connected sources reiterate RCE via memory-handling of objects, with network exploitation and user interaction required per CVSSv3; no specific patch version or exploit de...

CVE-2019-0654

Technical details about CVE-2019-0654 are not publicly available in the provided documents. Monitor for updates from official advisories for affected products, impact, and fixes.

CVE-2016-3289

CVE-2016-3289 affects Microsoft Internet Explorer 11 and Microsoft Edge. The issue is a memory corruption vulnerability in the browser when handling memory objects, which an attacker can exploit via a crafted webpage to achieve remote code execution or a denial of service. Connected CNVD entries ...

CVE-2017-0221

Microsoft Edge Memory Corruption Vulnerability (CVE-2017-0221) affects the Edge scripting engines when rendering in-memory objects. The root cause is improper handling/access to objects in memory, enabling remote code execution in the user’s context. Public references state this CVE is distinct f...

CVE-2017-11872

CVE-2017-11872 affects Microsoft Edge on Windows 10 (1607, 1703) and Windows Server 2016. The issue arises from how Edge handles redirect requests, allowing an attacker to force the browser to send data to a destination of the attacker’s choice. Connected sources corroborate related Edge security...

CVE-2017-8555

CVE-2017-8555 describes a vulnerability in Microsoft Edge on Windows 10 (1703) where the Content Security Policy (CSP) fails to properly validate certain crafted documents, enabling an attacker to trick a user into loading a page with malicious content. The issue is tied to Edge’s handling of CSP...

CVE-2017-8657

CVE-2017-8657 affects Microsoft Edge on Windows 10 (versions 1511, 1607, 1703) and Windows Server 2016. The issue is a memory corruption in the browser’s JavaScript engine when rendering objects in memory, allowing remote code execution under the current user. Exploitation is possible via special...

CVE-2017-8739

CVE-2017-8739 is a patchable information-disclosure vulnerability affecting Microsoft Edge in Windows 10 (1703). The root cause is improper handling of objects in memory by the Edge scripting engine, allowing an attacker to obtain information that could aid further compromise. Public advisories (...

CVE-2018-0933

CVE-2018-0933 concerns ChakraCore on Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016. The issue is a remote code execution due to how the Chakra scripting engine handles objects in memory (memory corruption). Public disclosures (GHSA advisories) describe ChakraCore RCE affecting...

CVE-2018-8280

CVE-2018-8280 and related Chakra memory-corruption issues affect Microsoft Edge and ChakraCore. The vulnerability arises from how the Chakra scripting engine handles objects in memory, enabling remote code execution. The connected advisories (GHSA entries and NVD/CVE records) confirm a Chakra mem...

CVE-2019-0678

CVE-2019-0678 is described in connected sources as an elevation of privilege in Microsoft Edge caused by failure to properly enforce cross-domain policies, allowing a remote attacker to access information from one domain and inject it into another. The CNVD entry explicitly notes Edge’s cross-dom...

CVE-2019-1023

CVE-2019-1023 describes an information disclosure vulnerability in Microsoft Edge and the ChakraCore JavaScript engine. The CNVD entry notes a vulnerability arising from a configuration or other error in operation, allowing an unauthorized attacker to obtain sensitive information. The NVD descrip...

CVE-2016-1103

CVE-2016-1103 is a Flash Player vulnerability described as a buffer overflow in the Flash components (Flash Player/Flash plugin) that could lead to code execution. Multiple advisories (APSB16-15) and vendor notes tie it to parsing of crafted SWF content, with public exploits available. Affected p...

CVE-2016-3222

CVE-2016-3222 refers to a memory corruption vulnerability in Microsoft Edge (and the Chakra/ scripting engine) that could allow remote code execution or crash via a crafted web page. Public disclosures identify affected products as Microsoft Edge and Microsoft Internet Explorer versions 9–11. The...

CVE-2016-3322

CVE-2016-3322 affects Internet Explorer 11 and Edge, described as a memory corruption vulnerability that can allow remote code execution when a user visits a crafted webpage. Connected sources corroborate a memory corruption flaw in Microsoft Edge/IE causing remote code execution, with CNVD-2016-...

CVE-2017-0203

CVE-2017-0203 involves a vulnerability in Microsoft Edge where the Edge Content Security Policy (CSP) fails to validate certain crafted documents, allowing an attacker to entice a user to load a page with malicious content. Affected product: Microsoft Edge; root cause: CSP validation weakness in ...

CVE-2017-0252

CVE-2017-0252 is a Chakra Core (ChakraEngine) RCE vulnerability in Microsoft Edge’s JavaScript engine, caused by how in-memory objects are rendered, enabling remote code execution. Connected advisories (GHSA/GHSA-448H, CNVD, MSRC) corroborate memory-corruption-based RCE in ChakraCore. Impact is h...

CVE-2017-11844

Microsoft Edge in Windows 10 versions 1703, 1709 and Windows Server 1709 has an information-disclosure vulnerability caused by how Edge handles objects in memory. The CVE entry (CVE-2017-11844) specifies that an attacker can obtain information to further compromise the user’s system. The connecte...

CVE-2017-8642

CVE-2017-8642 is an elevation-of-privilege issue in Microsoft Edge on Windows 10 (1703) caused by improper JavaScript validation, enabling privilege escalation. The CNVD entry confirms the flaw and impact but does not provide a patch/version to fix. Other connected records reference the same Edge...

CVE-2017-8649

Technical details for CVE-2017-8649 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2017-8652

CVE-2017-8652 is an information-disclosure/use-after-free vulnerability in Microsoft Edge on Windows 10 Gold/1511/1607/1703 and Windows Server 2016. The connected sources describe it as Edge memory-objects handling in which an attacker could disclose information. The Nessus/plugin notes this CVE ...

CVE-2018-0803

CVE-2018-0803 affects Microsoft Edge in Windows 10 (Gold and various builds) and Windows Server 2016, stemming from how Edge enforces cross-domain policies. The vulnerability allows an attacker to access information from one domain and inject it into another domain due to cross-domain policy hand...

CVE-2018-8278

CVE-2018-8278 is a Microsoft Edge content spoofing vulnerability caused by improper handling of certain HTML content. A remote attacker could lure a user to a malicious website or email link that spoofs the displayed site or serves as a pivot to chain attacks with other vulnerabilities. Exploitat...

CVE-2018-8301

Technical details about CVE-2018-8301 (affected software, root cause, impact, or fixes) are not provided in the supplied documents. Monitor for updates; no public details are available here.

CVE-2016-3277

CVE-2016-3277 affects Microsoft Internet Explorer 10/11 and Microsoft Edge. The issue is an information-disclosure vulnerability caused by improper handling of objects in memory, allowing remote attackers to obtain sensitive information via a crafted website. Mitigations are provided by Microsoft...

CVE-2016-3327

Technical details for CVE-2016-3327 are not publicly available in the provided connected documents. They list the CVE among IE/Edge updates but do not specify affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2016-4112

Technical details are not publicly available in the provided documents for CVE-2016-4112. Monitor for updates from vendors and security advisories before drawing conclusions about impact, affected products, or fixes.

CVE-2017-0034

Summary: CVE-2017-0034 is a remote code execution vulnerability in Microsoft Edge stemming from improper handling of objects in memory, enabling an attacker to run code in the context of the current user (potentially with administrative rights). The issue is tied to Edge (and EdgeHTML-based compo...

CVE-2017-11794

CVE-2017-11794 spans Microsoft Edge information-disclosure vulnerabilities in Windows 10 (1703/1709) and related Edge versions. Connected sources confirm the root cause: Edge mishandles objects in memory, enabling an attacker to obtain information that could aid further system compromise. CNVD-20...

CVE-2017-11888

CVE-2017-11888 is described in multiple sources as a memory-corruption vulnerability in Microsoft Edge within Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016 that could allow code execution in the context of the current user. The core issue is improper handling of objects in mem...

CVE-2017-8610

Technical details specific to CVE-2017-8610 (affected component/versions, root cause, impact, or remediation) are not provided in the connected documents. Monitor for updates from official advisories and vendors for precise information.

CVE-2017-8662

CVE-2017-8662 is an information-disclosure vulnerability affecting Microsoft Edge in Windows 10 (1703). The flaw stems from how Edge validates strings in specific scenarios, enabling an attacker to disclose information. Public references confirm the relation to Edge information-disclosure issues ...

CVE-2017-8672

CVE-2017-8672 details: Microsoft Edge on Windows 10 (various builds) is affected by a memory corruption vulnerability in the scripting engine when rendering objects in memory, enabling remote code execution in the context of the current user. The linked Nessus/NVD sources classify it as a high-se...

CVE-2017-8734

CVE-2017-8734 affects Microsoft Edge in Windows 10/Server 2016, where memory handling of Edge objects enables arbitrary code execution in the current user context. The vulnerability stems from how Edge accesses in-memory objects, enabling remote code execution when a user loads a specially crafte...

CVE-2018-0939

CVE-2018-0939 corresponds to a ChakraCore/Microsoft Edge information-disclosure vulnerability affecting Windows 10 (v1703/v1709). The issue arises from how the scripting engine handles objects in memory, enabling potential information disclosure. The connected advisories (GHSA-XGCC-R2F3-RQ6P) and...

CVE-2018-0993

The connected advisories corroborate CVE-2018-0993 as a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge and ChakraCore. The issue arises from the engine’s handling of objects in memory, described as a memory corruption/RCE scenario. Affected products are ...

CVE-2018-8128

CVE-2018-8128 is described here as a remote code execution vulnerability in the Microsoft Edge scripting engine related to memory handling, affecting Edge and ChakraCore. The Connected documents (GHSA advisories) reiterate a ChakraCore/Edge memory corruption RCE issue, listing CVE-2018-8128 among...

CVE-2018-8294

CVE-2018-8294 is a ChakraCore/Edge memory-corruption RCE in the Chakra scripting engine. Affected: Microsoft Edge and ChakraCore. The vulnerability involves how objects are handled in memory, yielding remote code execution with high impact. Individual connected sources (NVD entries and GitHub adv...

CVE-2018-8381

CVE-2018-8381 is a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge and ChakraCore, caused by the way objects are handled in memory (memory corruption). The issue affects Edge and ChakraCore, with a Cambridge of related CVEs in the 2018-83xx family (e.g., ...

CVE-2018-8403

CVE-2018-8403 is a remote code execution vulnerability in how Microsoft browsers access objects in memory (the Microsoft Browser Memory Corruption Vulnerability). Affected products include Internet Explorer 11, Microsoft Edge, and Internet Explorer 10. Root cause is memory corruption when handlin...

CVE-2018-8465

Technical details about CVE-2018-8465 are not publicly provided in the supplied documents. No affected product versions, root cause specifics, mitigations, or exploit indicators are present here. Monitor for updates from official advisories.

CVE-2018-8469

Microsoft Edge contains an elevation-of-privilege sandbox-escape vulnerability: CVE-2018-8469. Connected advisories describe a command-execution-type flaw in Edge’s sandbox that, when exploited, could allow a remote attacker to run arbitrary commands on the affected system. Exploitation details a...

CVE-2019-1299

CVE-2019-1299 concerns the Microsoft Edge built on EdgeHTML and is an information-disclosure vulnerability caused by how memory objects are handled. Multiple connected sources confirm the issue and describe it as an information-disclosure flaw in EdgeHTML’s handling of memory objects, enabling an...

CVE-2021-24100

CVE-2021-24100 affects Microsoft Edge for Android and is described as an information-disclosure vulnerability. The CVSSv3 base metrics in the connected data set indicate a local attack vector with high confidentiality impact but no integrity/availability impact (CVSS: AV:L/AC:L/PR:L/UI:R/S:U/C:H/...

CVE-2015-6159

CVE-2015-6159 is described in connected CNVD entries as a memory-corruption vulnerability affecting Microsoft Internet Explorer 11 and Microsoft Edge, exploitable via a crafted web site and capable of remote code execution or denial of service. The CNVD entries label it under the umbrella of memo...

CVE-2016-3331

CVE-2016-3331 affects Microsoft Internet Explorer 11 and Microsoft Edge with a memory corruption vulnerability that allows remote code execution or memory corruption via a crafted website. Root cause: improper handling of objects in memory in Microsoft browsers. Impact per sources: remote code ex...

CVE-2016-3350

The CVE-2016-3350 entry concerns the Chakra JavaScript engine in Microsoft Edge. It describes a memory corruption vulnerability in the Chakra engine that could allow remote code execution or a denial of service via a specially crafted website. Connected sources corroborate a Chakra memory corrupt...

CVE-2016-3388

CVE-2016-3388 affects Microsoft Internet Explorer 10/11 and Microsoft Edge through improper restriction of access to private namespaces, enabling privilege escalation. The CIRCL/NVD entries in the connected data indicate an exploitation presence (exploit-db entry 40606), but the provided document...