CVE-2016-0084

CVE-2016-0084 – Microsoft Edge memory corruption vulnerability . Microsoft Edge is affected by a remote memory-corruption issue exploitable via a crafted web page, potentially enabling arbitrary code execution or memory corruption leading to a DoS. Connected sources enumerate Edge-related CVEs in...

CVE-2016-0102

CVE-2016-0108 affects Microsoft Internet Explorer 11 (and related memory corruption class) with exploitation via a crafted web site leading to remote code execution or DoS. Connected data shows a real exploit entry (Exploit-DB: 39562) and sightings, confirming exploitation activity, while CNVD/NV...

CVE-2016-3198

CVE-2016-3198 affects Microsoft Edge (and related Edge components) with a CSP bypass vulnerability: Edge CSP fails to validate certain crafted documents, enabling remote bypass of the Content Security Policy. Public exploit activity is indicated in some sources, and the issue is addressed by a Mi...

CVE-2017-8504

Technical details for CVE-2017-8504 are not publicly available in the provided documents. Monitor official advisories for updates and remediation information.

CVE-2019-0566

CVE-2019-0566 affects Microsoft Edge. The vulnerability is described as an elevation of privilege in the Edge Browser Broker COM object (Microsoft Edge Elevation of Privilege Vulnerability). The NVD entry lists CVSS scores: CVSS2 base 6.8 (AV:N/AC:M/Au:N/C:P/I:P/A:P) and CVSS3 base 8.8 (CVSS:3.0/...

CVE-2015-6153

CVE-2015-6153 is part of the Microsoft browser memory corruption family affecting Internet Explorer 11 and Microsoft Edge. The connected data describe memory corruption when processing crafted web content, enabling remote code execution or memory-related denial of service. The vulnerabilities are...

CVE-2015-2449

CVE-2015-2449 affects Microsoft Internet Explorer (IE) versions 7–11 and Microsoft Edge, with the underlying issue described as an ASLR (Address Space Layout Randomization) bypass by visiting a crafted web page. Technical details in the connected documents confirm affected products and that the v...

CVE-2015-6140

The CVE-2015-6140 entry concerns Microsoft Internet Explorer 11 and Microsoft Edge. A memory corruption vulnerability can be triggered by a crafted web site, allowing remote code execution or memory corruption that could lead to a denial of service. The linked OpenVAS note references a missing Mi...

CVE-2016-0125

CVE-2016-0125 pertains to Microsoft Edge by mishandling the Referer policy, causing an information disclosure vulnerability that could expose a user’s request context or browsing history. Affected products include Microsoft Edge (and related IE components) with the root cause described as imprope...

CVE-2016-0157

CVE-2016-0157 is a memory corruption vulnerability in Microsoft Edge exploitable via a crafted web site, potentially allowing remote code execution or memory-based denial of service. The connected OpenVAS entry notes an MS16-038 patch, and CNVD entries describe a remote-memory corruption flaw in ...

CVE-2016-3248

CVE-2016-3248 covers a memory corruption vulnerability in Microsoft scripting engines (JScript 9, VBScript, Chakra) used by IE 9–11 and Edge. Exploitation via a crafted web site could allow remote code execution or memory corruption leading to DoS. Affected components: JScript/VBScript/Chakra wit...

CVE-2017-0152

CVE-2017-0152 is described across multiple sources as a remote code execution vulnerability in the Microsoft scripting engine, with memory corruption that could allow an attacker to execute arbitrary code under the current user. Veracode specifically attributes the issue to ChakraCore’s handling ...

CVE-2018-0932

CVE-2018-0932 affects Internet Explorer components in Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, and Internet Explorer/Edge on Windows 10, including IE in later builds (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016. The vulnerability is an infor...

CVE-2018-8177

The connected advisories collectively describe a ChakraCore memory-corruption vulnerability that can lead to remote code execution affecting ChakraCore and Microsoft Edge. The CVE-2018-8177 entry is linked to the broader family of Chakra memory–corruption flaws; however, the provided documents do...

CVE-2018-8564

CVE-2018-8564 is a spoofing vulnerability affecting Microsoft Edge where improper handling of certain HTML content could mislead users into thinking they are on a legitimate site. The NVD entry assigns a CVSSv3 base score of 4.3 (MEDIUM) with network attack vector, low attack complexity, no privi...

CVE-2016-3329

CVE-2016-3329 affects Internet Explorer 9–11 and Microsoft Edge. It is an information-disclosure flaw where a crafted webpage can reveal the existence of files on the user’s system. Root cause relates to how browsers handle memory objects/page content, enabling an attacker to infer file presence....

CVE-2016-3391

CVE-2016-3391 affects Microsoft Internet Explorer 10/11 and Edge. The issue allows credential disclosure via access to a memory dump (context-dependent disclosure). Connected sources identify mitigations as local patches: IE memory-disclosure fixes delivered via MS16-118 (and related MS16-119) up...

CVE-2016-7297

CVE-2016-7297 is linked to a Microsoft Edge memory-corruption issue in the scripting engine (Chakra) when sorting TypedArray elements via a crafted web page. Connected analysis (MS16-145) describes a TypedArray.sort UAF chain in Chakra.dll (version 11.0.14393.0 on Windows 10 Anniversary Update) t...

CVE-2015-6058

CVE-2015-6058 in Microsoft Edge describes a flaw where HTML attributes in HTTP responses are mishandled, allowing a remote attacker to bypass the Edge XSS filter. Affected product: Microsoft Edge. Root cause: improper handling of HTML attributes in HTTP response data, enabling a bypass of XSS pro...

CVE-2016-3269

Affected software/component: Chakra JavaScript engine used by Microsoft Edge. Issue summary: A memory corruption vulnerability that allows remote attackers to execute arbitrary code or cause a denial of service via a crafted web site (RCE/SOD) in Chakra. Root cause / nature: Described as a Chakra...

CVE-2016-3271

The CVE-2016-3271 issue is an information-disclosure vulnerability in the VBScript engine used by Microsoft Edge. A remote attacker could obtain sensitive data from process memory by presenting a crafted webpage, via the Edge VBScript component. The root cause is improper handling of memory objec...

CVE-2017-8669

CVE-2017-8669 affects Microsoft browsers in supported Windows versions (Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10 1511/1607/1703, and Windows Server 2016) with memory handling weaknesses when rendering content. Root cause: objects i...

CVE-2018-0998

CVE-2018-0998 concerns an information disclosure in Microsoft Edge PDF Reader where objects in memory are improperly handled. The affected product is Microsoft Edge. The connected MSKB updates (KB4093107, KB4093112, KB4093119) describe quality/security fixes across Edge and related components, im...

CVE-2018-8262

CVE-2018-8262 is a Microsoft Edge remote code execution vulnerability described as memory corruption from improper access to objects in memory. Affected product is Edge; some related entries also mention ChakraCore. The issue stems from Edge failing to handle objects in memory, enabling code exec...

CVE-2018-8297

CVE-2018-8297 describes an information disclosure in Microsoft Edge caused by improper handling of objects in memory. Affected software: Microsoft Edge. The entry only states this vulnerability exists and is unique from related CVEs (CVE-2018-8289, CVE-2018-8324, CVE-2018-8325); no specific root-...

CVE-2018-8388

CVE-2018-8388: Technical details are not provided in the supplied documents; no explicit affected product/version/root-cause details are stated here.

CVE-2015-6057

Microsoft Edge information-disclosure vulnerability CVE-2015-6057 exists in Edge’s memory handling (edgehtml objects in memory). A crafted webpage can cause partial disclosure of process memory. Affected product: Microsoft Edge on Windows (EdgeHTML memory handling). Root cause: improper handling ...

CVE-2016-3387

CVE-2016-3387 affects Microsoft Internet Explorer 10/11 and Microsoft Edge. The root cause is failure to properly restrict access to private namespaces, enabling remote attackers to elevate privileges via unspecified vectors. Public references show exploits linked to Exploit-DB (e.g., 40607), and...

CVE-2017-8598

The Microsoft Edge browser, specifically versions on Windows 10 Gold, 1511, 1607, 1703 , and Windows Server 2016 , is susceptible to a Scripting Engine Memory Corruption Vulnerability . The root cause is a failure in the JavaScript engine when handling objects in memory, which can allow a remote ...

CVE-2017-8659

CVE-2017-8659 affects Microsoft Edge and Microsoft Internet Explorer on Windows 10 version 1703, due to the Chakra scripting engine not properly handling objects in memory, enabling information disclosure. The vulnerability is documented as a Chakra information disclosure issue with the Edge/IE m...

CVE-2017-8724

CVE-2017-8724 describes a spoofing vulnerability in Microsoft Edge on Windows 10 Version 1703, caused by the browser’s handling/parsing of HTTP content. An attacker could trick a user by redirecting to a specially crafted website. The CNVD entry confirms Edge spoofing in Edge on Windows 10 1703; ...

CVE-2016-0003

CVE-2016-0003 concerns Microsoft Edge. The vulnerability is a memory corruption flaw caused by improper handling of objects in memory, allowing a remote attacker to execute arbitrary code on the system. An attacker can exploit this by persuading a user to open specially crafted content, with the ...

CVE-2016-7281

CVE-2016-7281 affects Microsoft Internet Explorer (IE10/IE11) and Microsoft Edge. The Web Workers implementation allows remote attackers to bypass the Same Origin Policy via unspecified vectors, enabling cross-origin access that should be restricted. Root cause per the description is a security f...

CVE-2017-8735

CVE-2017-8735 is a Windows Edge spoofing vulnerability affecting Microsoft Edge on Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016, where Edge can be tricked into redirecting users to a specially crafted website due to how HTTP content is parsed. The connected sources corroborate this...

CVE-2017-8757

CVE-2017-8757 is a remote code execution vulnerability in Microsoft Edge on Windows 10/Server 2016 where memory handling of Edge objects allows an attacker to run arbitrary code in the context of the current user. The issue is tied to Edge’s memory handling in regards to objects, and is listed am...

CVE-2018-8110

CVE-2018-8110 describes a remote code execution in Microsoft Edge caused by improper access to in-memory objects (memory corruption). Affected software is Edge; the root cause is stated as memory access issues, with related entries for CVE-2018-8236 and CVE-2018-8111 describing identical behavior...

CVE-2018-8509

CVE-2018-8509 pertains to Microsoft Edge memory corruption leading to remote code execution when Edge improperly accesses objects in memory. Connected documents also reference a related CVE-2018-8473 that affects Edge and ChakraCore with the same memory-access weakness. The vulnerability enables ...

CVE-2015-6073

CVE-2015-6073 targets Microsoft Internet Explorer 11 and Microsoft Edge with a memory-corruption vulnerability exploitable via a crafted web site, enabling remote code execution or memory corruption leading to DoS. The connected OpenVAS entry references Microsoft Edge multiple vulnerabilities inc...

CVE-2015-6170

Microsoft Edge on Windows 10 is affected by CVE-2015-6170, a remote privilege-escalation vulnerability: a crafted website can trigger elevation of privileges. Microsoft released MS15-125 (Edge cumulative update) to mitigate this via KB3116184, KB3116869, and KB3116900. Public exploits have been r...

CVE-2016-0024

CVE-2016-0024 concerns the Chakra JavaScript engine in Microsoft Edge. The connected advisories consistently describe a remote code execution vulnerability in Chakra/Edge via unspecified vectors (memory corruption). Public sources reference MS16-002 and a cumulative security update (MS16-002/3124...

CVE-2016-0062

CVE-2016-0062 affects Microsoft Internet Explorer 11 and Microsoft Edge, allowing remote code execution or memory corruption via a crafted web page. Public documentation confirms IE and Edge are vulnerable to memory corruption and remote execution in response to specially crafted content. Mitigat...

CVE-2016-0161

Microsoft Edge is affected by CVE-2016-0161, an elevation of privilege vulnerability where the browser fails to enforce cross-domain policies (Same Origin Policy). A remote attacker could exploit this to bypass domain boundaries and gain elevated privileges. The connected documents do not provide...

CVE-2016-3246

CVE-2016-3246 is a memory‑corruption vulnerability in Microsoft Edge (and related Microsoft browsers) that enables remote code execution via a crafted web site. The root cause is improper handling of objects in memory, leading to memory corruption and arbitrary code execution in the context of th...

CVE-2017-8637

CVE-2017-8637 affects Microsoft Edge on Windows 10 version 1703, describing a security feature bypass of Arbitrary Code Guard (ACG) due to memory access in Edge’s JIT-compiled code. Connected sources detail that the Chakra/JIT server memory handling can process unvalidated loop headers, enabling ...

CVE-2017-8726

Microsoft Edge on Windows 10 (versions Gold, 1511, 1607, 1703, 1709) and Windows Server 2016 is affected by several CVEs related to how Edge handles objects in memory. CVE-2017-8726 describes a memory-corruption vulnerability in Microsoft Edge’s scripting engines that can allow arbitrary code exe...

CVE-2017-8754

Technical details for CVE-2017-8754 are not publicly available in the provided documents. Connected sources do not specify affected products, root cause, impact, or fixes. Monitor for updates from authoritative advisories.

CVE-2018-8234

Microsoft Edge Information Disclosure Vulnerability (CVE-2018-8234) affects Microsoft Edge. Root cause: Edge improperly handles objects in memory, leading to potential information disclosure. The issue is confirmed by multiple sources (NVD entry for CVE-2018-8234 and CNVD/ENISA records reiteratin...

CVE-2018-8513

CVE-2018-8513 concerns a remote code execution vulnerability in the Chakra scripting engine’s handling of in-memory objects, affecting Microsoft Edge and ChakraCore. The root cause is memory handling in Chakra’s object model that can be exploited to execute arbitrary code. The CVSS assessment in ...

CVE-2015-6169

CVE-2015-6169: Microsoft Edge spoofing vulnerability caused by misparsing HTTP responses in Edge/IE leading to possible user redirection to arbitrary sites. Affected products include Microsoft Edge and Internet Explorer up to v11; root cause is improper HTTP response parsing allowing spoofed UI a...

CVE-2017-8723

CVE-2017-8723 affects Microsoft Edge in Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016.根 The vulnerability is a security feature bypass in Edge CSP where certain crafted documents bypass CSP validation, enabling a user to be tricked into loading malicious content. Connected data corr...