CVE-2016-4114

Technical details for CVE-2016-4114 are not provided in the supplied documents; the initial description is unspecified and no connected documents supply concrete details. Monitor for updates.

CVE-2016-4116

CVE-2016-4116 is a Flash Player vulnerability characterized as a flaw in the dynamic-link library loading path that could enable arbitrary code execution. Connected sources confirm the issue affects the Flash Player family (including Adobe Flash Player and related plugins) across multiple platfor...

CVE-2016-7206

CVE-2016-7206 : The provided connected documents indicate a cross-site scripting (XSS) vulnerability in Microsoft Edge described as allowing remote attackers to inject arbitrary web script or HTML via unspecified vectors (information disclosure/partial integrity impact). The core affected product...

CVE-2017-11844

Microsoft Edge in Windows 10 versions 1703, 1709 and Windows Server 1709 has an information-disclosure vulnerability caused by how Edge handles objects in memory. The CVE entry (CVE-2017-11844) specifies that an attacker can obtain information to further compromise the user’s system. The connecte...

CVE-2017-8739

CVE-2017-8739 is a patchable information-disclosure vulnerability affecting Microsoft Edge in Windows 10 (1703). The root cause is improper handling of objects in memory by the Edge scripting engine, allowing an attacker to obtain information that could aid further compromise. Public advisories (...

CVE-2018-0803

CVE-2018-0803 affects Microsoft Edge in Windows 10 (Gold and various builds) and Windows Server 2016, stemming from how Edge enforces cross-domain policies. The vulnerability allows an attacker to access information from one domain and inject it into another domain due to cross-domain policy hand...

CVE-2018-0893

CVE-2018-0893 corresponds to a Microsoft Edge type-confusion vulnerability. The connected disclosure notes this CVE as a Microsoft Edge Type Confusion Vulnerability with test cases, analysis, and proof-of-concept exploits. The primary impact stated across sources is remote code execution via the ...

CVE-2018-0939

CVE-2018-0939 corresponds to a ChakraCore/Microsoft Edge information-disclosure vulnerability affecting Windows 10 (v1703/v1709). The issue arises from how the scripting engine handles objects in memory, enabling potential information disclosure. The connected advisories (GHSA-XGCC-R2F3-RQ6P) and...

CVE-2018-8276

CVE-2018-8276 describes a security feature bypass in the Microsoft Chakra scripting engine that enables bypassing Control Flow Guard (CFG) . Affected products include Microsoft Edge and the ChakraCore engine. The connected advisory (GHSA-wg47-6cqc-q52j) reiterates the CFG bypass in ChakraCore/Edg...

CVE-2018-8324

Technical details such as affected Edge versions, root cause, exploit information, or remediation are not provided in the connected documents. The CVE entry’s public details are limited to a general description; monitor for updates.

CVE-2018-8380

CVE-2018-8380 describes a remote code execution in the Chakra scripting engine used by Microsoft Edge and ChakraCore. The root cause is a memory handling issue with objects in memory, leading to potential code execution. Affected products/components are Microsoft Edge and ChakraCore; the CVSS3 ve...

CVE-2018-8381

CVE-2018-8381 is a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge and ChakraCore, caused by the way objects are handled in memory (memory corruption). The issue affects Edge and ChakraCore, with a Cambridge of related CVEs in the 2018-83xx family (e.g., ...

CVE-2018-8473

CVE-2018-8473 is a remote code execution vulnerability affecting Microsoft Edge (and related ChakraCore) due to improper memory object access. Multiple connected sources corroborate a memory corruption issue in Edge and in the ChakraCore scripting engine, enabling an attacker to run arbitrary cod...

CVE-2018-8543

CVE-2018-8543 : A remote code execution in the Chakra scripting engine via memory handling of objects, affecting Microsoft Edge and ChakraCore. Root cause: memory corruption in object handling. CVSSv3 base score 7.5 (HIGH); attack vector NETWORK; user interaction required. No exploit details or r...

CVE-2021-24100

CVE-2021-24100 affects Microsoft Edge for Android and is described as an information-disclosure vulnerability. The CVSSv3 base metrics in the connected data set indicate a local attack vector with high confidentiality impact but no integrity/availability impact (CVSS: AV:L/AC:L/PR:L/UI:R/S:U/C:H/...

CVE-2016-3264

CVE-2016-3264 describes a memory corruption vulnerability in Microsoft browsers. The affected components are Internet Explorer 9–11 and Microsoft Edge, which allow remote attackers to execute arbitrary code or cause a denial of service by visiting a crafted website (memory corruption). The issue ...

CVE-2016-3331

CVE-2016-3331 affects Microsoft Internet Explorer 11 and Microsoft Edge with a memory corruption vulnerability that allows remote code execution or memory corruption via a crafted website. Root cause: improper handling of objects in memory in Microsoft browsers. Impact per sources: remote code ex...

CVE-2017-0205

CVE-2017-0205 – Microsoft Edge Memory Corruption : A remote code execution vulnerability exists when Edge improperly accesses objects in memory, allowing an attacker to execute arbitrary code in the context of the current user (potentially with admin rights). Exploitation could occur if a user vi...

CVE-2017-8609

CVE-2017-8609 affects Microsoft Internet Explorer on Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. The root cause is a memory-corruption vulnerability in the JavaScript engine’s handling of objects in memory, leading to remote code execution. Exploitation can occur when a user visi...

CVE-2017-8610

Technical details specific to CVE-2017-8610 (affected component/versions, root cause, impact, or remediation) are not provided in the connected documents. Monitor for updates from official advisories and vendors for precise information.

CVE-2017-8638

Technical details for CVE-2017-8638 are not provided in the connected documents. The supplied materials describe the issue at a high level but do not specify affected products/versions, root cause, or remediation. Monitor for updates.

CVE-2017-8734

CVE-2017-8734 affects Microsoft Edge in Windows 10/Server 2016, where memory handling of Edge objects enables arbitrary code execution in the current user context. The vulnerability stems from how Edge accesses in-memory objects, enabling remote code execution when a user loads a specially crafte...

CVE-2018-8510

Technical details about CVE-2018-8510 are not provided in the supplied documents. Public information in connected sources references ChakraCore/RCE in Chakra but does not specify this CVE. Monitor for updates.

CVE-2015-6078

CVE-2015-6078 affects Microsoft Internet Explorer 9–11 and Microsoft Edge and is described as a memory corruption vulnerability that can allow remote code execution or a denial of service when visiting a crafted site. The NVD entry, cross-linked CVEs (including CVE-2015-6065 and CVE-2015-6064/607...

CVE-2015-6139

CVE-2015-6139 affects Microsoft Internet Explorer 11 and Microsoft Edge. The flaw arises from how content types are handled, allowing remote attackers to execute arbitrary web script in a privileged context via a crafted web site (high risk, CVSS v2 base 9.3). Affected products: Internet Explorer...

CVE-2015-6151

The CVE-2015-6151 issue affects Microsoft Internet Explorer 8–11 and Microsoft Edge, where memory corruption can be triggered by a crafted web site, allowing remote code execution or a memory-related denial of service. The OpenVAS entry corroborates this as part of the MS15-125/related updates, a...

CVE-2016-0061

CVE-2016-0061 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, where a crafted website can trigger memory corruption, enabling remote code execution or a denial of service. Root cause is memory corruption in the browser’s handling of web content. Public references point to Microsoft s...

CVE-2016-3350

The CVE-2016-3350 entry concerns the Chakra JavaScript engine in Microsoft Edge. It describes a memory corruption vulnerability in the Chakra engine that could allow remote code execution or a denial of service via a specially crafted website. Connected sources corroborate a Chakra memory corrupt...

CVE-2017-11845

Summary (CVE-2017-11845) : Microsoft Edge in Windows 10 version 1703 is affected by a memory corruption vulnerability in how Edge handles objects in memory, enabling remote code execution in the context of the current user when a user visits a crafted webpage. The issue is a remote exploit vector...

CVE-2017-11888

CVE-2017-11888 is described in multiple sources as a memory-corruption vulnerability in Microsoft Edge within Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016 that could allow code execution in the context of the current user. The core issue is improper handling of objects in mem...

CVE-2017-8497

CVE-2017-8497 : Microsoft Edge on Windows 10 (version 1607) and Windows Server 2016 is affected by a remote code execution memory-corruption vulnerability when Edge improperly accesses objects in memory. An attacker could host a crafted website or lure a user to view content to execute code in th...

CVE-2017-8603

CVE-2017-8603: A use-after-free in Microsoft Edge’s AsmJsInterpreter during HTML/script processing allows remote code execution in the current user context. Credited source (CPAI-2017-0656) notes Edge memory handling object processing as the root cause. Attack requires a user to open a crafted pa...

CVE-2017-8753

CVE-2017-8753 : Microsoft Edge on Windows 10 (Gold/1511/1607/1703) and Windows Server 2016 is affected by a memory corruption issue in the Edge scripting engine when handling objects in memory, allowing an attacker to execute arbitrary code in the user’s context. Connected advisories corroborate ...

CVE-2018-0839

This CVE describes an information-disclosure vulnerability in Microsoft Edge running on Windows 10 (1703, and referenced variants 1709). Affected component: Edge’s handling of in-memory objects, which can lead to leakage of sensitive data. The CVE summarizes that information could be disclosed du...

CVE-2018-8229

Summary (CVE-2018-8229) : A remote code execution vulnerability exists in the Chakra scripting engine’s handling of objects in memory, affecting Microsoft Edge and ChakraCore . The root cause is memory corruption within Chakra’s in-memory object handling, leading to arbitrary code execution with ...

CVE-2018-8235

CVE-2018-8235 describes a security feature bypass in Microsoft Edge where cross-origin requests are mishandled, effectively bypassing SOP/Same-Origin Policy protections. Connected advisory CPAI-2018-0552 notes that multiple browsers were affected with an information-disclosure risk, highlighting ...

CVE-2018-8358

CVE-2018-8358 is a security feature bypass in Microsoft Edge caused by improper handling of redirect requests, allowing bypass of CORS redirect restrictions and potential data leakage through redirects to attacker‑controlled destinations. Public references (NVD/MSRC) confirm Edge as affected and ...

CVE-2018-8465

Technical details about CVE-2018-8465 are not publicly provided in the supplied documents. No affected product versions, root cause specifics, mitigations, or exploit indicators are present here. Monitor for updates from official advisories.

CVE-2016-3265

CVE-2016-3265 impacts the Chakra JavaScript engine used by Microsoft Edge (ChakraCore). The connected documents describe a memory corruption vulnerability in the ChakraJS engine that could allow a remote attacker to execute arbitrary code or cause a denial of service via a crafted web site. The r...

CVE-2017-0028

The connected data confirms CVE-2017-0028 affects the Microsoft scripting engine (ChakraCore) and is due to a use-after-free in Parse.cpp when asynchronous arrow functions are used, enabling remote code execution with the caller’s user rights. Impact is remote code execution in the context of the...

CVE-2017-8530

Microsoft Edge in Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016 is affected by CVE-2017-8530: an attacker can trick a user into loading a page with malicious content due to Edge not properly enforcing same-origin policies. This is a vulnerability in Edge’s handling of same-origin co...

CVE-2017-8660

CVE-2017-8660 affects Microsoft Edge in Windows 10 (versions 1511, 1607, 1703) and Windows Server 2016. Root cause: how the Microsoft Edge JavaScript engine renders objects in memory, leading to memory corruption. Impact: attacker can execute arbitrary code in the context of the current user. The...

CVE-2018-0892

CVE-2018-0892 concerns Microsoft Edge information disclosure due to improper handling of objects in memory. The connected MS KB updates (KB4093107, KB4093112, KB4093119) document quality fixes for Internet Explorer/Microsoft Edge components, including SVG rendering issues and related memory acces...

CVE-2018-0993

The connected advisories corroborate CVE-2018-0993 as a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge and ChakraCore. The issue arises from the engine’s handling of objects in memory, described as a memory corruption/RCE scenario. Affected products are ...

CVE-2018-8357

CVE-2018-8357 affects Microsoft browsers (Internet Explorer 11 and Microsoft Edge). The description and linked sources indicate an elevation of privilege vulnerability enabling sandbox escapes within those browsers. The CVSS data present in the initial document shows a high severity (CVSS-3 base ...

CVE-2018-8505

Technical details for CVE-2018-8505 are not publicly provided in the connected documents. The entries reference Chakra/Core vulnerabilities in general but do not specify affected products, versions, root cause, impact, or fixes. Monitor for official updates.

CVE-2019-0645

Technical details for CVE-2019-0645 are not publicly available in the provided documents. No affected products, root cause, or remediation details are found here. Monitor for updates.

CVE-2019-0650

Microsoft Edge memory corruption/heap/buffer overflow issues described across CVE-2019-0650 and related records indicate a remote code execution risk when Edge improperly accesses objects in memory. Connected CNVD entries frame this as a buffer overflow in Edge affecting memory integrity, but the...

CVE-2019-0779

Microsoft Edge Memory Corruption Vulnerability (CVE-2019-0779): A remote code execution flaw caused by Edge improperly accessing objects in memory. Exploitation involves convincing a user to visit a malicious website or a compromised page, enabling arbitrary code execution in the current user con...

CVE-2016-0084

CVE-2016-0084 – Microsoft Edge memory corruption vulnerability . Microsoft Edge is affected by a remote memory-corruption issue exploitable via a crafted web page, potentially enabling arbitrary code execution or memory corruption leading to a DoS. Connected sources enumerate Edge-related CVEs in...