CVE-2019-0565

CVE-2019-0565 is a remote code execution vulnerability in Microsoft Edge caused by improper handling of in-memory objects in the browser. Successful exploitation could allow an attacker to execute arbitrary code in the context of the current user, potentially granting the attacker the user’s righ...

CVE-2017-11798

CVE-2017-11798 affects Microsoft Edge on Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. The vulnerability stems from how the scripting engine handles objects in memory, enabling an attacker to execute arbitrary code in the context of the current user. The CVSS metrics from the initi...

CVE-2017-8596

CVE-2017-8596 affects Microsoft Edge on Windows 10 1607/1703 and Windows Server 2016. The issue is a remote memory corruption in the Chakra JavaScript engine when rendering objects in memory, enabling code execution in the context of the current user. CVSS data from NVD indicates high risk (AV:N/...

CVE-2017-8672

CVE-2017-8672 details: Microsoft Edge on Windows 10 (various builds) is affected by a memory corruption vulnerability in the scripting engine when rendering objects in memory, enabling remote code execution in the context of the current user. The linked Nessus/NVD sources classify it as a high-se...

CVE-2018-0836

The CVE-2018-0836 entry concerns Microsoft Edge and ChakraCore in Windows 10 (1703/1709) where remote code execution is possible due to how the scripting engine handles objects in memory (Scripting Engine Memory Corruption). Connected advisories (GHSA) corroborate a ChakraCore RCE vulnerability a...

CVE-2018-0931

CVE-2018-0931 concerns the ChakraCore memory handling in the Chakra scripting engine, leading to remote code execution on Windows 10 variants (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016. The connected GitHub advisories (GHSA-6C2V-XC8F-FVF7, GHSA-6V8R-83V3-RMRF, GHSA-PHCC-FRH9-Q545, GHS...

CVE-2019-0762

Technical details for CVE-2019-0762 are not publicly available in the provided documents. They describe a security feature bypass in Microsoft browsers without specifics on affected products, versions, or mitigations. Monitor for updates.

CVE-2019-1054

CVE-2019-1054 is a Microsoft Edge vulnerability a security feature bypass, specifically bypassing Mark of the Web (MOTW) tagging. The underlying issue is Edge’s handling of MOTW, which could allow a user to be exposed to a bypass of multiple security technologies if MOTW isn’t set. Affected produ...

CVE-2015-6159

CVE-2015-6159 is described in connected CNVD entries as a memory-corruption vulnerability affecting Microsoft Internet Explorer 11 and Microsoft Edge, exploitable via a crafted web site and capable of remote code execution or denial of service. The CNVD entries label it under the umbrella of memo...

CVE-2016-0155

Microsoft Edge memory corruption vulnerabilities (CVE-2016-0155/0156/0157) allow remote code execution or memory corruption via crafted web content. Root cause is improper memory access in Edge's handling of web content. Affected product: Microsoft Edge (Windows 10). Impact: arbitrary code execut...

CVE-2016-1101

CVE-2016-1101 is a Flash Player vulnerability (heap buffer overflow) affecting Adobe Flash Player up to 21.0.0.x and the Flash libraries in IE/Edge. Public advisories and vendor notes describe a heap-buffer-overflow/ memory-corruption issue in Flash parsing, enabling remote code execution as part...

CVE-2016-3322

CVE-2016-3322 affects Internet Explorer 11 and Edge, described as a memory corruption vulnerability that can allow remote code execution when a user visits a crafted webpage. Connected sources corroborate a memory corruption flaw in Microsoft Edge/IE causing remote code execution, with CNVD-2016-...

CVE-2017-0034

Summary: CVE-2017-0034 is a remote code execution vulnerability in Microsoft Edge stemming from improper handling of objects in memory, enabling an attacker to run code in the context of the current user (potentially with administrative rights). The issue is tied to Edge (and EdgeHTML-based compo...

CVE-2017-11872

CVE-2017-11872 affects Microsoft Edge on Windows 10 (1607, 1703) and Windows Server 2016. The issue arises from how Edge handles redirect requests, allowing an attacker to force the browser to send data to a destination of the attacker’s choice. Connected sources corroborate related Edge security...

CVE-2017-8549

CVE-2017-8549 affects Microsoft Edge in Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. Description: Edge improperly handles objects in memory, enabling information disclosure that could help an attacker further compromise the system (Scripting Engine Memory Corruption). Connected do...

CVE-2017-8555

CVE-2017-8555 describes a vulnerability in Microsoft Edge on Windows 10 (1703) where the Content Security Policy (CSP) fails to properly validate certain crafted documents, enabling an attacker to trick a user into loading a page with malicious content. The issue is tied to Edge’s handling of CSP...

CVE-2017-8751

CVE-2017-8751 affects Microsoft Edge in Windows 10 (1703). Root cause: Edge’s handling of objects in memory leading to memory corruption. Impact: attacker can execute arbitrary code in the context of the current user. Exploitation note: exploits exist (e.g., exploit-db entry) per linked reference...

CVE-2018-0771

The CVE-2018-0771 entry refers to a security feature bypass in Microsoft Edge on Windows 10 (versions 1607 and 1703) and Windows Server 2016, caused by Edge handling of different-origin requests. Connected sources show related Microsoft KB updates (KB4088776 for OS Build 16299.309) delivering sec...

CVE-2018-8137

CVE-2018-8137 is a remote code execution vulnerability in the Microsoft Edge scripting engine (ChakraCore) linked to memory handling of objects. The connected advisories confirm this vulnerability affects Edge and ChakraCore and classify it as remote code execution, but the documents do not provi...

CVE-2019-1030

The CVE-2019-1030 entry concerns an information disclosure in Microsoft Edge (EdgeHTML) where improper in-memory handling of objects could allow an attacker to obtain information to further compromise a user’s system. Exploitation would be web-based: an attacker could host a site or leverage comp...

CVE-2019-1299

CVE-2019-1299 concerns the Microsoft Edge built on EdgeHTML and is an information-disclosure vulnerability caused by how memory objects are handled. Multiple connected sources confirm the issue and describe it as an information-disclosure flaw in EdgeHTML’s handling of memory objects, enabling an...

CVE-2015-6176

CVE-2015-6176 affects Microsoft Edge (and related IE components) and is caused by Edge mishandling HTML attributes in HTTP responses, enabling remote attackers to bypass the XSS protection mechanism. Public PoC/exploitation references exist (exploit-db) and the advisory is addressed by MS15-125: ...

CVE-2016-3277

CVE-2016-3277 affects Microsoft Internet Explorer 10/11 and Microsoft Edge. The issue is an information-disclosure vulnerability caused by improper handling of objects in memory, allowing remote attackers to obtain sensitive information via a crafted website. Mitigations are provided by Microsoft...

CVE-2016-3327

Technical details for CVE-2016-3327 are not publicly available in the provided connected documents. They list the CVE among IE/Edge updates but do not specify affected products, root cause, impact, or fixes. Monitor for updates.

CVE-2016-3382

CVE-2016-3382 is linked to a Chakra-based memory corruption vulnerability affecting the scripting engines in Microsoft Internet Explorer 9–11 and Microsoft Edge. The related GitHub advisory notes an RCE/DoS scenario via a crafted web site, demonstrating exploitation through the Chakra JavaScript ...

CVE-2016-3389

The CVE-2016-3389 entry concerns the Chakra JavaScript engine in Microsoft Edge. It describes memory corruption that can allow remote attackers to execute arbitrary code or cause a denial of service via a crafted website. The connected advisories reiterate the same description but do not provide ...

CVE-2016-4112

Technical details are not publicly available in the provided documents for CVE-2016-4112. Monitor for updates from vendors and security advisories before drawing conclusions about impact, affected products, or fixes.

CVE-2017-0221

Microsoft Edge Memory Corruption Vulnerability (CVE-2017-0221) affects the Edge scripting engines when rendering in-memory objects. The root cause is improper handling/access to objects in memory, enabling remote code execution in the user’s context. Public references state this CVE is distinct f...

CVE-2017-8548

CVE-2017-8548 affects Microsoft Edge in Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. It describes improper handling of in-memory objects in Edge’s scripting engine, causing memory corruption and information disclosure that could aid system compromise. A public exploit has been lin...

CVE-2017-8649

Technical details for CVE-2017-8649 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2018-0861

The CVE-2018-0861 entry concerns a memory corruption flaw in the scripting engine used by Microsoft Edge and ChakraCore, leading to remote code execution. Affected software/products mentioned across connected documents include Microsoft Edge and ChakraCore on Windows 10 (Gold/1511/1607/1703/1709)...

CVE-2018-8278

CVE-2018-8278 is a Microsoft Edge content spoofing vulnerability caused by improper handling of certain HTML content. A remote attacker could lure a user to a malicious website or email link that spoofs the displayed site or serves as a pivot to chain attacks with other vulnerabilities. Exploitat...

CVE-2018-8459

The CVE-2018-8459 entry concerns a remote code execution in ChakraCore/microsoft Edge caused by how objects are handled in memory. Affected software is ChakraCore (and Microsoft Edge using ChakraCore). The underlying issue is a memory handling flaw that can enable code execution with network atta...

CVE-2019-0634

Technical details about CVE-2019-0634 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2015-2446

CVE-2015-2446 affects Microsoft Internet Explorer 11 and Microsoft Edge. The vulnerability enables remote attackers to execute arbitrary code or cause a denial of service via a crafted web site due to a memory corruption issue. The CVE is tied to a separate entry (CVE-2015-2447) that describes a ...

CVE-2016-3222

A memory corruption vulnerability exists in Microsoft Edge (and Internet Explorer versions 9 through 11) caused by improper handling of objects in memory, specifically within the Chakra JavaScript engine or the CBase::Scriptable component. A remote attacker can exploit this by tricking a user int...

CVE-2016-3293

CVE-2016-3293 corresponds to a memory corruption vulnerability in Microsoft browsers described as the Microsoft Browser Memory Corruption Vulnerability, affecting Internet Explorer 9–11 and Microsoft Edge. The connected documents confirm a remote-code-execution risk when a user visits a crafted w...

CVE-2016-4113

Technical details for CVE-2016-4113 are not publicly available in the provided documents. Monitor for updates.

CVE-2017-11794

CVE-2017-11794 spans Microsoft Edge information-disclosure vulnerabilities in Windows 10 (1703/1709) and related Edge versions. Connected sources confirm the root cause: Edge mishandles objects in memory, enabling an attacker to obtain information that could aid further system compromise. CNVD-20...

CVE-2017-8604

CVE-2017-8604 is a Microsoft Edge scripting engine remote memory corruption vulnerability affecting Windows 10 (versions 1511, 1607, 1703) and Windows Server 2016. The issue arises when the JavaScript engine fails to render or handles memory objects, enabling an attacker to execute arbitrary code...

CVE-2017-8642

CVE-2017-8642 is an elevation-of-privilege issue in Microsoft Edge on Windows 10 (1703) caused by improper JavaScript validation, enabling privilege escalation. The CNVD entry confirms the flaw and impact but does not provide a patch/version to fix. Other connected records reference the same Edge...

CVE-2017-8657

CVE-2017-8657 affects Microsoft Edge on Windows 10 (versions 1511, 1607, 1703) and Windows Server 2016. The issue is a memory corruption in the browser’s JavaScript engine when rendering objects in memory, allowing remote code execution under the current user. Exploitation is possible via special...

CVE-2017-8662

CVE-2017-8662 is an information-disclosure vulnerability affecting Microsoft Edge in Windows 10 (1703). The flaw stems from how Edge validates strings in specific scenarios, enabling an attacker to disclose information. Public references confirm the relation to Edge information-disclosure issues ...

CVE-2017-8674

Technical details for CVE-2017-8674 are not publicly available in the provided documents; no affected products, root cause, or fixes are specified here. Monitor for updates from security advisories and vendor advisories.

CVE-2017-8738

CVE-2017-8738 : A remote code execution vulnerability in Microsoft Edge’s scripting engine on Windows 10 (Gold, 1511, 1607) and Windows Server 2016. Root cause: memory objects are mishandled by the Edge scripting engine, allowing memory corruption and code execution in the current user context. A...

CVE-2018-0951

CVE-2018-0951 describes a remote code execution vulnerability in the Microsoft Edge scripting engine’s handling of in-memory objects. Affected product: Microsoft Edge. Root cause: memory handling issue within the scripting engine leading to memory corruption. Impact as stated: potential remote co...

CVE-2018-8294

CVE-2018-8294 is a ChakraCore/Edge memory-corruption RCE in the Chakra scripting engine. Affected: Microsoft Edge and ChakraCore. The vulnerability involves how objects are handled in memory, yielding remote code execution with high impact. Individual connected sources (NVD entries and GitHub adv...

CVE-2018-8301

Technical details about CVE-2018-8301 (affected software, root cause, impact, or fixes) are not provided in the supplied documents. Monitor for updates; no public details are available here.

CVE-2018-8469

Microsoft Edge contains an elevation-of-privilege sandbox-escape vulnerability: CVE-2018-8469. Connected advisories describe a command-execution-type flaw in Edge’s sandbox that, when exploited, could allow a remote attacker to run arbitrary commands on the affected system. Exploitation details a...

CVE-2019-0678

CVE-2019-0678 is described in connected sources as an elevation of privilege in Microsoft Edge caused by failure to properly enforce cross-domain policies, allowing a remote attacker to access information from one domain and inject it into another. The CNVD entry explicitly notes Edge’s cross-dom...