Lucene search

K
MicrosoftEdge

903 matches found

CVE
CVE
added 2018/04/12 1:29 a.m.71 views

CVE-2018-1019

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0979, CVE-2018-0980, CVE-...

7.6CVSS6.4AI score0.77559EPSS
CVE
CVE
added 2018/05/09 7:29 p.m.71 views

CVE-2018-1025

An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory, aka "Microsoft Browser Information Disclosure Vulnerability." This affects Internet Explorer 11, Microsoft Edge.

4.3CVSS5.4AI score0.07018EPSS
CVE
CVE
added 2018/08/15 5:29 p.m.71 views

CVE-2018-8351

An information disclosure vulnerability exists when affected Microsoft browsers improperly allow cross-frame interaction, aka "Microsoft Browser Information Disclosure Vulnerability." This affects Internet Explorer 11, Microsoft Edge, Internet Explorer 10.

6.5CVSS6.1AI score0.10465EPSS
CVE
CVE
added 2018/11/14 1:29 a.m.71 views

CVE-2018-8557

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542, CVE-...

7.6CVSS6.5AI score0.0569EPSS
CVE
CVE
added 2019/01/08 9:29 p.m.71 views

CVE-2019-0565

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge.

7.6CVSS7.7AI score0.05399EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.71 views

CVE-2019-0652

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0590, CVE-2019-0591, CVE-2019-0593, CVE-2019-0605, CVE-2019-0607, CVE-2019-0610,...

7.6CVSS7.7AI score0.34646EPSS
CVE
CVE
added 2023/07/01 12:15 a.m.71 views

CVE-2021-34475

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

5.4CVSS5.5AI score0.00231EPSS
CVE
CVE
added 2021/08/26 6:15 p.m.71 views

CVE-2021-36929

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

6.3CVSS5.8AI score0.02321EPSS
CVE
CVE
added 2024/09/19 9:15 p.m.71 views

CVE-2024-38221

Microsoft Edge (Chromium-based) Spoofing Vulnerability

4.3CVSS4.8AI score0.00548EPSS
CVE
CVE
added 2024/10/17 11:15 p.m.71 views

CVE-2024-43579

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

8.3CVSS7.8AI score0.06605EPSS
CVE
CVE
added 2016/05/11 11:0 a.m.70 views

CVE-2016-1104

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.

7.6CVSS8.3AI score0.39664EPSS
Web
CVE
CVE
added 2016/05/11 11:0 a.m.70 views

CVE-2016-1108

Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer 10 and 11 and Microsoft Edge, has unknown impact and attack vectors, a different vulnerability than other CVEs listed in MS16-064.

7.6CVSS8.2AI score0.06955EPSS
CVE
CVE
added 2016/06/16 1:59 a.m.70 views

CVE-2016-3201

Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted PDF document, aka "Windows PDF Information Disclosure Vulnerability," a different vulnerability than CVE-2016...

6.5CVSS5.4AI score0.36951EPSS
CVE
CVE
added 2016/07/13 1:59 a.m.70 views

CVE-2016-3260

The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engin...

9.3CVSS8.6AI score0.22641EPSS
CVE
CVE
added 2016/08/09 9:59 p.m.70 views

CVE-2016-3322

Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3289.

7.6CVSS7.2AI score0.31575EPSS
CVE
CVE
added 2017/04/12 2:59 p.m.70 views

CVE-2017-0093

A remote code execution vulnerability in Microsoft Edge exists in the way that the Scripting Engine renders when handling objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user, a...

7.6CVSS7.5AI score0.2391EPSS
CVE
CVE
added 2017/09/13 1:29 a.m.70 views

CVE-2017-11766

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way that Microsoft Edge accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability". This CVE ID is...

7.6CVSS7.1AI score0.6165EPSS
CVE
CVE
added 2017/07/11 9:29 p.m.70 views

CVE-2017-8602

Microsoft browsers on Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow a spoofing vulnerability in the way they parse HTTP content, aka "Microsoft Browser Spoofing Vulner...

6.5CVSS6.3AI score0.27181EPSS
CVE
CVE
added 2017/07/11 9:29 p.m.70 views

CVE-2017-8610

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique fro...

7.6CVSS7.5AI score0.78054EPSS
CVE
CVE
added 2018/01/04 2:29 p.m.70 views

CVE-2018-0767

Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE I...

5.3CVSS5AI score0.72149EPSS
CVE
CVE
added 2018/02/15 2:29 a.m.70 views

CVE-2018-0837

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-...

7.6CVSS7.3AI score0.7974EPSS
CVE
CVE
added 2018/05/09 7:29 p.m.70 views

CVE-2018-0951

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0953, CVE-2018-0954, ...

7.6CVSS7.7AI score0.77559EPSS
CVE
CVE
added 2018/07/11 12:29 a.m.70 views

CVE-2018-8279

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8125, CVE-2018-8262, CVE-2018-8274, CVE-2018-8275, CVE-2018-8301...

7.6CVSS6.6AI score0.85081EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.70 views

CVE-2019-0634

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0645, CVE-2019-0650.

7.6CVSS8.6AI score0.37455EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.70 views

CVE-2019-0643

An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka 'Microsoft Edge Information Disclosure Vulnerability'.

4.3CVSS5.5AI score0.08752EPSS
CVE
CVE
added 2019/03/06 12:0 a.m.70 views

CVE-2019-0648

An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data.To exploit the vulnerability, an attacker must know the memory address of where the object w...

4.3CVSS4.8AI score0.2445EPSS
CVE
CVE
added 2021/08/26 6:15 p.m.70 views

CVE-2021-36931

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

7.8CVSS5.5AI score0.00453EPSS
CVE
CVE
added 2021/09/02 11:15 p.m.70 views

CVE-2021-38641

Microsoft Edge for Android Spoofing Vulnerability

6.1CVSS6.3AI score0.00716EPSS
CVE
CVE
added 2024/10/17 11:15 p.m.70 views

CVE-2024-43595

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

8.8CVSS7AI score0.00567EPSS
CVE
CVE
added 2025/02/06 11:15 p.m.70 views

CVE-2025-21279

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

8.8CVSS6.7AI score0.00325EPSS
CVE
CVE
added 2025/02/06 11:15 p.m.70 views

CVE-2025-21283

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

8.8CVSS6.7AI score0.00283EPSS
CVE
CVE
added 2015/11/11 12:59 p.m.69 views

CVE-2015-6088

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Browser ASLR Bypass."

4.3CVSS6.3AI score0.1224EPSS
CVE
CVE
added 2016/04/12 11:59 p.m.69 views

CVE-2016-0154

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."

7.6CVSS7.2AI score0.20455EPSS
CVE
CVE
added 2016/09/14 10:59 a.m.69 views

CVE-2016-3295

Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."

7.5CVSS7.7AI score0.52989EPSS
CVE
CVE
added 2016/09/06 10:59 a.m.69 views

CVE-2016-7153

The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack.

5.3CVSS4.9AI score0.03915EPSS
CVE
CVE
added 2016/12/20 6:59 a.m.69 views

CVE-2016-7286

The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7288, CVE-2016-7296, and CVE-2016-7297.

7.6CVSS7.6AI score0.7786EPSS
Web
CVE
CVE
added 2016/12/20 6:59 a.m.69 views

CVE-2016-7296

The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7286, CVE-2016-7288, and CVE-2016-7297.

7.6CVSS7.6AI score0.7786EPSS
CVE
CVE
added 2017/04/12 2:59 p.m.69 views

CVE-2017-0203

A vulnerability exists in Microsoft Edge when the Edge Content Security Policy (CSP) fails to properly validate certain specially crafted documents. An attacker could trick a user into loading a web page with malicious content, aka "Microsoft Edge Security Feature Bypass Vulnerability."

4.3CVSS5.4AI score0.04702EPSS
CVE
CVE
added 2017/10/13 1:29 p.m.69 views

CVE-2017-11794

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to obtain information to further compromise the user's system, due to how Microsoft Edge handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique from CVE-2017-8726 and CVE-2017-11803.

4.3CVSS4AI score0.12825EPSS
CVE
CVE
added 2017/11/15 3:29 a.m.69 views

CVE-2017-11844

Microsoft Edge in Microsoft Windows 10 1703, 1709 and Windows Server, version 1709 allows an attacker to obtain information to further compromise the user's system, due to how Microsoft Edge handles objects in memory, aka "Microsoft Edge Information Disclosure Vulnerability". This CVE ID is unique ...

4.3CVSS4AI score0.12253EPSS
CVE
CVE
added 2017/06/15 1:29 a.m.69 views

CVE-2017-8521

Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fails to handle objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2017-8499, CVE-2017-8...

7.6CVSS6.8AI score0.74995EPSS
CVE
CVE
added 2017/07/11 9:29 p.m.69 views

CVE-2017-8596

Microsoft Edge in Microsoft Windows 10 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnera...

7.6CVSS7.5AI score0.78054EPSS
CVE
CVE
added 2017/07/11 9:29 p.m.69 views

CVE-2017-8604

Microsoft Edge in Microsoft Windows 10 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption V...

7.6CVSS7.5AI score0.78054EPSS
CVE
CVE
added 2017/08/08 9:29 p.m.69 views

CVE-2017-8657

Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, aka "Scripting Engine Memory Corr...

7.6CVSS7.8AI score0.82712EPSS
CVE
CVE
added 2018/02/15 2:29 a.m.69 views

CVE-2018-0836

Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0837, CVE-2018-0838,...

7.6CVSS7.3AI score0.7974EPSS
CVE
CVE
added 2018/02/15 2:29 a.m.69 views

CVE-2018-0856

Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2018-0834, CVE-2018-0835, CVE-2018-0836, CVE-2018-0837,...

7.6CVSS7.3AI score0.7974EPSS
CVE
CVE
added 2018/07/11 12:29 a.m.69 views

CVE-2018-8275

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8125, CVE-2018-8262, CVE-2018-8274, CVE-2018-8279, CVE-2018-8301...

7.6CVSS6.6AI score0.85081EPSS
CVE
CVE
added 2018/09/13 12:29 a.m.69 views

CVE-2018-8469

An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Microsoft Edge Elevation of Privilege Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8463.

7.4CVSS7.3AI score0.17912EPSS
CVE
CVE
added 2018/11/14 1:29 a.m.69 views

CVE-2018-8541

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8542, CVE-2018-8543, CVE-...

7.6CVSS6.5AI score0.0569EPSS
CVE
CVE
added 2019/06/12 2:29 p.m.69 views

CVE-2019-0990

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who s...

6.5CVSS6.8AI score0.12446EPSS
Total number of security vulnerabilities903