CVE-2019-0650

Microsoft Edge memory corruption/heap/buffer overflow issues described across CVE-2019-0650 and related records indicate a remote code execution risk when Edge improperly accesses objects in memory. Connected CNVD entries frame this as a buffer overflow in Edge affecting memory integrity, but the...

CVE-2021-24100

CVE-2021-24100 affects Microsoft Edge for Android and is described as an information-disclosure vulnerability. The CVSSv3 base metrics in the connected data set indicate a local attack vector with high confidentiality impact but no integrity/availability impact (CVSS: AV:L/AC:L/PR:L/UI:R/S:U/C:H/...

CVE-2015-6078

CVE-2015-6078 affects Microsoft Internet Explorer 9–11 and Microsoft Edge and is described as a memory corruption vulnerability that can allow remote code execution or a denial of service when visiting a crafted site. The NVD entry, cross-linked CVEs (including CVE-2015-6065 and CVE-2015-6064/607...

CVE-2016-7206

CVE-2016-7206 : The provided connected documents indicate a cross-site scripting (XSS) vulnerability in Microsoft Edge described as allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors (information disclosure/partial integrity impact). The core affected product...

CVE-2017-8504

Technical details for CVE-2017-8504 are not publicly available in the provided documents. Monitor official advisories for updates and remediation information.

CVE-2018-0892

CVE-2018-0892 concerns Microsoft Edge information disclosure due to improper handling of objects in memory. The connected MS KB updates (KB4093107, KB4093112, KB4093119) document quality fixes for Internet Explorer/Microsoft Edge components, including SVG rendering issues and related memory acces...

CVE-2018-8510

Technical details about CVE-2018-8510 are not provided in the supplied documents. Public information in connected sources references ChakraCore/RCE in Chakra but does not specify this CVE. Monitor for updates.

CVE-2019-0566

CVE-2019-0566 affects Microsoft Edge. The vulnerability is described as an elevation of privilege in the Edge Browser Broker COM object (Microsoft Edge Elevation of Privilege Vulnerability). The NVD entry lists CVSS scores: CVSS2 base 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) and CVSS3 base 8.8 (CVSS:3.0/...

CVE-2019-0645

Technical details for CVE-2019-0645 are not publicly available in the provided documents. No affected products, root cause, or remediation details are found here. Monitor for updates.

CVE-2015-6139

CVE-2015-6139 affects Microsoft Internet Explorer 11 and Microsoft Edge. The flaw arises from how content types are handled, allowing remote attackers to execute arbitrary web script in a privileged context via a crafted web site (high risk, CVSS v2 base 9.3). Affected products: Internet Explorer...

CVE-2015-6151

The CVE-2015-6151 issue affects Microsoft Internet Explorer 8–11 and Microsoft Edge, where memory corruption can be triggered by a crafted web site, allowing remote code execution or a memory-related denial of service. The OpenVAS entry corroborates this as part of the MS15-125/related updates, a...

CVE-2016-0084

CVE-2016-0084 – Microsoft Edge memory corruption vulnerability . Microsoft Edge is affected by a remote memory-corruption issue exploitable via a crafted web page, potentially enabling arbitrary code execution or memory corruption leading to a DoS. Connected sources enumerate Edge-related CVEs in...

CVE-2016-0102

CVE-2016-0108 affects Microsoft Internet Explorer 11 (and related memory corruption class) with exploitation via a crafted web site leading to remote code execution or DoS. Connected data shows a real exploit entry (Exploit-DB: 39562) and sightings, confirming exploitation activity, while CNVD/NV...

CVE-2016-0157

CVE-2016-0157 is a memory corruption vulnerability in Microsoft Edge exploitable via a crafted web site, potentially allowing remote code execution or memory-based denial of service. The connected OpenVAS entry notes an MS16-038 patch, and CNVD entries describe a remote-memory corruption flaw in ...

CVE-2016-3264

CVE-2016-3264 describes a memory corruption vulnerability in Microsoft browsers. The affected components are Internet Explorer 9–11 and Microsoft Edge, which allow remote attackers to execute arbitrary code or cause a denial of service by visiting a crafted website (memory corruption). The issue ...

CVE-2016-3293

CVE-2016-3293 corresponds to a memory corruption vulnerability in Microsoft browsers described as the Microsoft Browser Memory Corruption Vulnerability, affecting Internet Explorer 9–11 and Microsoft Edge. The connected documents confirm a remote-code-execution risk when a user visits a crafted w...

CVE-2016-3350

The CVE-2016-3350 entry concerns the Chakra JavaScript engine in Microsoft Edge. It describes a memory corruption vulnerability in the Chakra engine that could allow remote code execution or a denial of service via a specially crafted website. Connected sources corroborate a Chakra memory corrupt...

CVE-2016-4114

Technical details for CVE-2016-4114 are not provided in the supplied documents; the initial description is unspecified and no connected documents supply concrete details. Monitor for updates.

CVE-2017-0205

CVE-2017-0205 – Microsoft Edge Memory Corruption : A remote code execution vulnerability exists when Edge improperly accesses objects in memory, allowing an attacker to execute arbitrary code in the context of the current user (potentially with admin rights). Exploitation could occur if a user vi...

CVE-2017-8497

CVE-2017-8497 : Microsoft Edge on Windows 10 (version 1607) and Windows Server 2016 is affected by a remote code execution memory-corruption vulnerability when Edge improperly accesses objects in memory. An attacker could host a crafted website or lure a user to view content to execute code in th...

CVE-2017-8530

Microsoft Edge in Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016 is affected by CVE-2017-8530: an attacker can trick a user into loading a page with malicious content due to Edge not properly enforcing same-origin policies. This is a vulnerability in Edge’s handling of same-origin co...

CVE-2017-8638

Technical details for CVE-2017-8638 are not provided in the connected documents. The supplied materials describe the issue at a high level but do not specify affected products/versions, root cause, or remediation. Monitor for updates.

CVE-2017-8660

CVE-2017-8660 affects Microsoft Edge in Windows 10 (versions 1511, 1607, 1703) and Windows Server 2016. Root cause: how the Microsoft Edge JavaScript engine renders objects in memory, leading to memory corruption. Impact: attacker can execute arbitrary code in the context of the current user. The...

CVE-2017-8674

Technical details for CVE-2017-8674 are not publicly available in the provided documents; no affected products, root cause, or fixes are specified here. Monitor for updates from security advisories and vendor advisories.

CVE-2017-8753

CVE-2017-8753 : Microsoft Edge on Windows 10 (Gold/1511/1607/1703) and Windows Server 2016 is affected by a memory corruption issue in the Edge scripting engine when handling objects in memory, allowing an attacker to execute arbitrary code in the user’s context. Connected advisories corroborate ...

CVE-2018-8123

CVE-2018-8123 affects Microsoft Edge (EdgeHTML) and is due to improper handling of objects in memory, causing information disclosure. The vulnerability could be exploited via web-based attacks (e.g., malicious site or embedded content) that tricks a user into visiting the attacker’s page. The doc...

CVE-2018-8324

Technical details such as affected Edge versions, root cause, exploit information, or remediation are not provided in the connected documents. The CVE entry’s public details are limited to a general description; monitor for updates.

CVE-2018-8381

CVE-2018-8381 is a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge and ChakraCore, caused by the way objects are handled in memory (memory corruption). The issue affects Edge and ChakraCore, with a Cambridge of related CVEs in the 2018-83xx family (e.g., ...

CVE-2018-8459

The CVE-2018-8459 entry concerns a remote code execution in ChakraCore/microsoft Edge caused by how objects are handled in memory. Affected software is ChakraCore (and Microsoft Edge using ChakraCore). The underlying issue is a memory handling flaw that can enable code execution with network atta...

CVE-2018-8473

CVE-2018-8473 is a remote code execution vulnerability affecting Microsoft Edge (and related ChakraCore) due to improper memory object access. Multiple connected sources corroborate a memory corruption issue in Edge and in the ChakraCore scripting engine, enabling an attacker to run arbitrary cod...

CVE-2018-8543

CVE-2018-8543 : A remote code execution in the Chakra scripting engine via memory handling of objects, affecting Microsoft Edge and ChakraCore. Root cause: memory corruption in object handling. CVSSv3 base score 7.5 (HIGH); attack vector NETWORK; user interaction required. No exploit details or r...

CVE-2019-0762

Technical details for CVE-2019-0762 are not publicly available in the provided documents. They describe a security feature bypass in Microsoft browsers without specifics on affected products, versions, or mitigations. Monitor for updates.

CVE-2019-0779

Microsoft Edge Memory Corruption Vulnerability (CVE-2019-0779): A remote code execution flaw caused by Edge improperly accessing objects in memory. Exploitation involves convincing a user to visit a malicious website or a compromised page, enabling arbitrary code execution in the current user con...

CVE-2015-2446

CVE-2015-2446 affects Microsoft Internet Explorer 11 and Microsoft Edge. The vulnerability enables remote attackers to execute arbitrary code or cause a denial of service via a crafted web site due to a memory corruption issue. The CVE is tied to a separate entry (CVE-2015-2447) that describes a ...

CVE-2015-6176

CVE-2015-6176 affects Microsoft Edge (and related IE components) and is caused by Edge mishandling HTML attributes in HTTP responses, enabling remote attackers to bypass the XSS protection mechanism. Public PoC/exploitation references exist (exploit-db) and the advisory is addressed by MS15-125: ...

CVE-2016-0061

CVE-2016-0061 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, where a crafted website can trigger memory corruption, enabling remote code execution or a denial of service. Root cause is memory corruption in the browser’s handling of web content. Public references point to Microsoft s...

CVE-2017-11845

Summary (CVE-2017-11845) : Microsoft Edge in Windows 10 version 1703 is affected by a memory corruption vulnerability in how Edge handles objects in memory, enabling remote code execution in the context of the current user when a user visits a crafted webpage. The issue is a remote exploit vector...

CVE-2017-8595

CVE-2017-8595 is a memory-corruption vulnerability in Microsoft Edge’s scripting engine on Windows 10/Server 2016, where improper handling of in-memory objects can lead to arbitrary code execution with the current user’s privileges. The connected sources indicate Edge’s JavaScript engine memory h...

CVE-2017-8603

CVE-2017-8603: A use-after-free in Microsoft Edge’s AsmJsInterpreter during HTML/script processing allows remote code execution in the current user context. Credited source (CPAI-2017-0656) notes Edge memory handling object processing as the root cause. Attack requires a user to open a crafted pa...

CVE-2017-8609

CVE-2017-8609 affects Microsoft Internet Explorer on Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. The root cause is a memory-corruption vulnerability in the JavaScript engine’s handling of objects in memory, leading to remote code execution. Exploitation can occur when a user visi...

CVE-2018-0839

This CVE describes an information-disclosure vulnerability in Microsoft Edge running on Windows 10 (1703, and referenced variants 1709). Affected component: Edge’s handling of in-memory objects, which can lead to leakage of sensitive data. The CVE summarizes that information could be disclosed du...

CVE-2018-0937

CVE-2018-0937 concerns ChakraCore and Windows 10 (notably 1703 and 1709) enabling remote code execution via how the Chakra scripting engine manages objects in memory, i.e., a memory-corruption vulnerability in Chakra. The connected advisories reiterate an RCE issue affecting ChakraCore across Win...

CVE-2018-8276

CVE-2018-8276 describes a security feature bypass in the Microsoft Chakra scripting engine that enables bypassing Control Flow Guard (CFG) . Affected products include Microsoft Edge and the ChakraCore engine. The connected advisory (GHSA-wg47-6cqc-q52j) reiterates the CFG bypass in ChakraCore/Edg...

CVE-2016-3198

CVE-2016-3198 affects Microsoft Edge (and related Edge components) with a CSP bypass vulnerability: Edge CSP fails to validate certain crafted documents, enabling remote bypass of the Content Security Policy. Public exploit activity is indicated in some sources, and the issue is addressed by a Mi...

CVE-2016-3382

CVE-2016-3382 is linked to a Chakra-based memory corruption vulnerability affecting the scripting engines in Microsoft Internet Explorer 9–11 and Microsoft Edge. The related GitHub advisory notes an RCE/DoS scenario via a crafted web site, demonstrating exploitation through the Chakra JavaScript ...

CVE-2017-8598

Technical details for CVE-2017-8598 are not provided in the connected documents. Monitor for updates from CIRCL/CNVD/Nessus sources for affected products, impacts, and fixes.

CVE-2018-0932

CVE-2018-0932 affects Internet Explorer components in Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, and Internet Explorer/Edge on Windows 10, including IE in later builds (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016. The vulnerability is an infor...

CVE-2018-8235

CVE-2018-8235 describes a security feature bypass in Microsoft Edge where cross-origin requests are mishandled, effectively bypassing SOP/Same-Origin Policy protections. Connected advisory CPAI-2018-0552 notes that multiple browsers were affected with an information-disclosure risk, highlighting ...

CVE-2018-8358

CVE-2018-8358 is a security feature bypass in Microsoft Edge caused by improper handling of redirect requests, allowing bypass of CORS redirect restrictions and potential data leakage through redirects to attacker‑controlled destinations. Public references (NVD/MSRC) confirm Edge as affected and ...

CVE-2018-8564

CVE-2018-8564 is a spoofing vulnerability affecting Microsoft Edge where improper handling of certain HTML content could mislead users into thinking they are on a legitimate site. The NVD entry assigns a CVSSv3 base score of 4.3 (MEDIUM) with network attack vector, low attack complexity, no privi...