CVE-2015-6153

CVE-2015-6153 is part of the Microsoft browser memory corruption family affecting Internet Explorer 11 and Microsoft Edge. The connected data describe memory corruption when processing crafted web content, enabling remote code execution or memory-related denial of service. The vulnerabilities are...

CVE-2016-3198

CVE-2016-3198 affects Microsoft Edge (and related Edge components) with a CSP bypass vulnerability: Edge CSP fails to validate certain crafted documents, enabling remote bypass of the Content Security Policy. Public exploit activity is indicated in some sources, and the issue is addressed by a Mi...

CVE-2018-0932

CVE-2018-0932 affects Internet Explorer components in Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012/R2, and Internet Explorer/Edge on Windows 10, including IE in later builds (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016. The vulnerability is an infor...

CVE-2018-8235

CVE-2018-8235 describes a security feature bypass in Microsoft Edge where cross-origin requests are mishandled, effectively bypassing SOP/Same-Origin Policy protections. Connected advisory CPAI-2018-0552 notes that multiple browsers were affected with an information-disclosure risk, highlighting ...

CVE-2016-0125

CVE-2016-0125 pertains to Microsoft Edge by mishandling the Referer policy, causing an information disclosure vulnerability that could expose a user’s request context or browsing history. Affected products include Microsoft Edge (and related IE components) with the root cause described as imprope...

CVE-2016-3248

CVE-2016-3248 covers a memory corruption vulnerability in Microsoft scripting engines (JScript 9, VBScript, Chakra) used by IE 9–11 and Edge. Exploitation via a crafted web site could allow remote code execution or memory corruption leading to DoS. Affected components: JScript/VBScript/Chakra wit...

CVE-2017-0152

CVE-2017-0152 is described across multiple sources as a remote code execution vulnerability in the Microsoft scripting engine, with memory corruption that could allow an attacker to execute arbitrary code under the current user. Veracode specifically attributes the issue to ChakraCore’s handling ...

CVE-2018-8262

CVE-2018-8262 is a Microsoft Edge remote code execution vulnerability described as memory corruption from improper access to objects in memory. Affected product is Edge; some related entries also mention ChakraCore. The issue stems from Edge failing to handle objects in memory, enabling code exec...

CVE-2018-8505

Technical details for CVE-2018-8505 are not publicly provided in the connected documents. The entries reference Chakra/Core vulnerabilities in general but do not specify affected products, versions, root cause, impact, or fixes. Monitor for official updates.

CVE-2016-3391

CVE-2016-3391 affects Microsoft Internet Explorer 10/11 and Edge. The issue allows credential disclosure via access to a memory dump (context-dependent disclosure). Connected sources identify mitigations as local patches: IE memory-disclosure fixes delivered via MS16-118 (and related MS16-119) up...

CVE-2016-7297

CVE-2016-7297 is linked to a Microsoft Edge memory-corruption issue in the scripting engine (Chakra) when sorting TypedArray elements via a crafted web page. Connected analysis (MS16-145) describes a TypedArray.sort UAF chain in Chakra.dll (version 11.0.14393.0 on Windows 10 Anniversary Update) t...

CVE-2017-8724

CVE-2017-8724 describes a spoofing vulnerability in Microsoft Edge on Windows 10 Version 1703, caused by the browser’s handling/parsing of HTTP content. An attacker could trick a user by redirecting to a specially crafted website. The CNVD entry confirms Edge spoofing in Edge on Windows 10 1703; ...

CVE-2018-8177

The connected advisories collectively describe a ChakraCore memory-corruption vulnerability that can lead to remote code execution affecting ChakraCore and Microsoft Edge. The CVE-2018-8177 entry is linked to the broader family of Chakra memory–corruption flaws; however, the provided documents do...

CVE-2018-8380

CVE-2018-8380 describes a remote code execution in the Chakra scripting engine used by Microsoft Edge and ChakraCore. The root cause is a memory handling issue with objects in memory, leading to potential code execution. Affected products/components are Microsoft Edge and ChakraCore; the CVSS3 ve...

CVE-2018-8388

CVE-2018-8388: Technical details are not provided in the supplied documents; no explicit affected product/version/root-cause details are stated here.

CVE-2016-3259

CVE-2016-3259 concerns memory corruption in Microsoft JScript 9, VBScript, and Chakra JavaScript engines used by Internet Explorer 9–11 and Edge, per the CVE entry and multiple related advisories. The connected documents corroborate a Chakra/JScript/VBScript memory corruption vulnerability that e...

CVE-2015-2449

CVE-2015-2449 affects Microsoft Internet Explorer (IE) versions 7–11 and Microsoft Edge, with the underlying issue described as an ASLR (Address Space Layout Randomization) bypass by visiting a crafted web page. Technical details in the connected documents confirm affected products and that the v...

CVE-2016-3387

CVE-2016-3387 affects Microsoft Internet Explorer 10/11 and Microsoft Edge. The root cause is failure to properly restrict access to private namespaces, enabling remote attackers to elevate privileges via unspecified vectors. Public references show exploits linked to Exploit-DB (e.g., 40607), and...

CVE-2017-8669

CVE-2017-8669 affects Microsoft browsers in supported Windows versions (Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 R2, Windows 10 1511/1607/1703, and Windows Server 2016) with memory handling weaknesses when rendering content. Root cause: objects i...

CVE-2017-8726

Microsoft Edge on Windows 10 (versions Gold, 1511, 1607, 1703, 1709) and Windows Server 2016 is affected by several CVEs related to how Edge handles objects in memory. CVE-2017-8726 describes a memory-corruption vulnerability in Microsoft Edge’s scripting engines that can allow arbitrary code exe...

CVE-2018-8227

CVE-2018-8227 / CVE-2018-8229 describe a remote code execution vulnerability in the Chakra scripting engine, affecting Microsoft Edge and ChakraCore . The issue is a memory corruption flaw in how the engine handles objects in memory, as stated in connected advisories. The connected documents do n...

CVE-2015-6057

Microsoft Edge information-disclosure vulnerability CVE-2015-6057 exists in Edge’s memory handling (edgehtml objects in memory). A crafted webpage can cause partial disclosure of process memory. Affected product: Microsoft Edge on Windows (EdgeHTML memory handling). Root cause: improper handling ...

CVE-2015-6058

CVE-2015-6058 in Microsoft Edge describes a flaw where HTML attributes in HTTP responses are mishandled, allowing a remote attacker to bypass the Edge XSS filter. Affected product: Microsoft Edge. Root cause: improper handling of HTML attributes in HTTP response data, enabling a bypass of XSS pro...

CVE-2016-0024

CVE-2016-0024 concerns the Chakra JavaScript engine in Microsoft Edge. The connected advisories consistently describe a remote code execution vulnerability in Chakra/Edge via unspecified vectors (memory corruption). Public sources reference MS16-002 and a cumulative security update (MS16-002/3124...

CVE-2016-0062

CVE-2016-0062 affects Microsoft Internet Explorer 11 and Microsoft Edge, allowing remote code execution or memory corruption via a crafted web page. Public documentation confirms IE and Edge are vulnerable to memory corruption and remote execution in response to specially crafted content. Mitigat...

CVE-2016-3329

CVE-2016-3329 affects Internet Explorer 9–11 and Microsoft Edge. It is an information-disclosure flaw where a crafted webpage can reveal the existence of files on the user’s system. Root cause relates to how browsers handle memory objects/page content, enabling an attacker to infer file presence....

CVE-2016-7281

CVE-2016-7281 affects Microsoft Internet Explorer (IE10/IE11) and Microsoft Edge. The Web Workers implementation allows remote attackers to bypass the Same Origin Policy via unspecified vectors, enabling cross-origin access that should be restricted. Root cause per the description is a security f...

CVE-2017-0028

The connected data confirms CVE-2017-0028 affects the Microsoft scripting engine (ChakraCore) and is due to a use-after-free in Parse.cpp when asynchronous arrow functions are used, enabling remote code execution with the caller’s user rights. Impact is remote code execution in the context of the...

CVE-2017-8735

CVE-2017-8735 is a Windows Edge spoofing vulnerability affecting Microsoft Edge on Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016, where Edge can be tricked into redirecting users to a specially crafted website due to how HTTP content is parsed. The connected sources corroborate this...

CVE-2018-8110

CVE-2018-8110 describes a remote code execution in Microsoft Edge caused by improper access to in-memory objects (memory corruption). Affected software is Edge; the root cause is stated as memory access issues, with related entries for CVE-2018-8236 and CVE-2018-8111 describing identical behavior...

CVE-2018-8274

The CVE-2018-8274 family concerns a remote code execution vulnerability in Microsoft Edge caused by memory corruption from improper access to objects in memory. Affected components include Microsoft Edge, with some entries (e.g., CVE-2018-8279) noting ChakraCore as involved. The root cause is a m...

CVE-2015-6073

CVE-2015-6073 targets Microsoft Internet Explorer 11 and Microsoft Edge with a memory-corruption vulnerability exploitable via a crafted web site, enabling remote code execution or memory corruption leading to DoS. The connected OpenVAS entry references Microsoft Edge multiple vulnerabilities inc...

CVE-2016-0003

CVE-2016-0003 concerns Microsoft Edge. The vulnerability is a memory corruption flaw caused by improper handling of objects in memory, allowing a remote attacker to execute arbitrary code on the system. An attacker can exploit this by persuading a user to open specially crafted content, with the ...

CVE-2016-0156

Summary: CVE-2016-0156 concerns Microsoft Edge memory corruption triggered by a crafted web site, leading to remote code execution or memory corruption in the user context. Affected product: Microsoft Edge (Windows 10) as indicated by multiple sources in the connected documents. Technical details...

CVE-2016-0161

Microsoft Edge is affected by CVE-2016-0161, an elevation of privilege vulnerability where the browser fails to enforce cross-domain policies (Same Origin Policy). A remote attacker could exploit this to bypass domain boundaries and gain elevated privileges. The connected documents do not provide...

CVE-2016-3330

CVE-2016-3330 is described in the provided MSRC/NVD entries as a memory corruption vulnerability in Microsoft Edge (and related Microsoft browsers) that can lead to remote code execution or a denial of service when a user visits a crafted website. The underlying issue is described as a memory han...

CVE-2016-7181

CVE-2016-7181 is a memory corruption/remote code execution vulnerability in Microsoft Edge described as a vulnerability where a crafted website could trigger memory corruption to execute arbitrary code or cause a denial of service. The affected component is Microsoft Edge browser (Windows environ...

CVE-2017-8659

CVE-2017-8659 affects Microsoft Edge and Microsoft Internet Explorer on Windows 10 version 1703, due to the Chakra scripting engine not properly handling objects in memory, enabling information disclosure. The vulnerability is documented as a Chakra information disclosure issue with the Edge/IE m...

CVE-2018-0998

CVE-2018-0998 concerns an information disclosure in Microsoft Edge PDF Reader where objects in memory are improperly handled. The affected product is Microsoft Edge. The connected MSKB updates (KB4093107, KB4093112, KB4093119) describe quality/security fixes across Edge and related components, im...

CVE-2018-8236

CVE-2018-8236 describes a remote code execution vulnerability in Microsoft Edge due to improper access to objects in memory, resulting in memory corruption. Affected product: Microsoft Edge. The root cause is memory corruption from improper memory object access. Impact is remote code execution in...

CVE-2018-8509

CVE-2018-8509 pertains to Microsoft Edge memory corruption leading to remote code execution when Edge improperly accesses objects in memory. Connected documents also reference a related CVE-2018-8473 that affects Edge and ChakraCore with the same memory-access weakness. The vulnerability enables ...

CVE-2018-8513

CVE-2018-8513 concerns a remote code execution vulnerability in the Chakra scripting engine’s handling of in-memory objects, affecting Microsoft Edge and ChakraCore. The root cause is memory handling in Chakra’s object model that can be exploited to execute arbitrary code. The CVSS assessment in ...

CVE-2015-6170

Microsoft Edge on Windows 10 is affected by CVE-2015-6170, a remote privilege-escalation vulnerability: a crafted website can trigger elevation of privileges. Microsoft released MS15-125 (Edge cumulative update) to mitigate this via KB3116184, KB3116869, and KB3116900. Public exploits have been r...

CVE-2016-3294

Technical details (affected product, component, root cause, impacted versions, or exploitation data) are not publicly provided in the supplied documents; monitor for updates.

CVE-2017-8637

CVE-2017-8637 affects Microsoft Edge on Windows 10 version 1703, describing a security feature bypass of Arbitrary Code Guard (ACG) due to memory access in Edge’s JIT-compiled code. Connected sources detail that the Chakra/JIT server memory handling can process unvalidated loop headers, enabling ...

CVE-2017-8643

CVE-2017-8643 affects Microsoft Edge in Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016, enabling information disclosure by leaving a malicious website open during clipboard activity due to Edge clipboard event handling. The Nessus plugin for KB4038781 documents this as part of the Se...

CVE-2017-8723

CVE-2017-8723 affects Microsoft Edge in Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016.根 The vulnerability is a security feature bypass in Edge CSP where certain crafted documents bypass CSP validation, enabling a user to be tricked into loading malicious content. Connected data corr...

CVE-2017-8754

Technical details for CVE-2017-8754 are not publicly available in the provided documents. Connected sources do not specify affected products, root cause, impact, or fixes. Monitor for updates from authoritative advisories.

CVE-2017-8757

CVE-2017-8757 is a remote code execution vulnerability in Microsoft Edge on Windows 10/Server 2016 where memory handling of Edge objects allows an attacker to run arbitrary code in the context of the current user. The issue is tied to Edge’s memory handling in regards to objects, and is listed am...

CVE-2018-8297

CVE-2018-8297 describes an information disclosure in Microsoft Edge caused by improper handling of objects in memory. Affected software: Microsoft Edge. The entry only states this vulnerability exists and is unique from related CVEs (CVE-2018-8289, CVE-2018-8324, CVE-2018-8325); no specific root-...