CVE-2019-0912

Technical details about CVE-2019-0912 are not publicly available in the provided documents; no product, impact, or remediation specifics are disclosed. Monitor for updates from official advisories.

CVE-2020-1555

CVE-2020-1555 is a memory corruption vulnerability in the Edge HTML-based scripting engine. The vulnerability allows an attacker to execute arbitrary code in the context of the current user, with the potential for full system compromise if the user has admin rights. The issue stems from how the E...

CVE-2024-38103

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (CVE-2024-38103) is documented in the CVE entry with a MEDIUM base score (CVSS 3.1) and edge network-based exposure. Connected documents corroborate that this CVE is part of a family of Edge vulnerabilities reported in 2024 (e.g...

CVE-2016-3325

CVE-2016-3325 affects Microsoft Internet Explorer 11 and Microsoft Edge. A memory handling flaw in IE/Edge enables information disclosure when visiting a crafted site; attack vector is network, with user interaction required (per CVSS3). Exploitation has been observed (CVE-2016-3325 appears in ex...

CVE-2020-17131

CVE-2020-17131 concerns a memory corruption vulnerability in the Chakra Scripting Engine described in the connected advisories as an out-of-bounds write in Chakra . The linked sources identify the issue as part of Chakra’s scripting engine and associate it with the same CVE across multiple feeds,...

CVE-2019-0884

Technical details for CVE-2019-0884 are not publicly available in the provided documents; no affected product/version or exploit guidance are specified. Monitor for updates from official advisories.

CVE-2020-17054

Technical details for CVE-2020-17054 are not publicly provided in the connected documents. Monitor official advisories for updates; no affected product/version or remediation is disclosed here.

CVE-2018-1025

CVE-2018-1025 is an information-disclosure vulnerability in affected Microsoft browsers, specifically Internet Explorer 11 and Microsoft Edge, caused by improper handling of objects in memory. The NVD entry states the issue leads to leakage of information but does not provide exploit details, aff...

CVE-2017-0234

CVE-2017-0234 corresponds to a remote code execution in the Chakra JavaScript engine used by Microsoft Edge, triggered by memory handling when rendering objects. Connected advisories confirm a ChakraCore/Edge scripting-engine memory corruption issue; exploitation would arise from the engine’s han...

CVE-2017-0236

The connected documentation confirms CVE-2017-0236 is a remote code execution vulnerability in Microsoft Edge’s Chakra JavaScript engine related to memory handling of objects, described as a Scripting Engine Memory Corruption vulnerability. The issue is triggered during rendering in memory, enabl...

CVE-2020-0828

Technical details for CVE-2020-0828 are not publicly available in the provided connected documents; no affected products, root cause, impact, or remediation are specified here. Monitor for updates.

CVE-2020-0826

Technical details about CVE-2020-0826 are not publicly available in the provided connected documents. No affected products, root cause, or remediation are specified here. Monitor for updates from official advisories and trusted vulnerability feeds.

CVE-2020-0830

Technical details about CVE-2020-0830 are not provided in the connected documents. Public information for this CVE is not present here. Monitor for updates from official advisories and trusted sources.

CVE-2020-0848

CVE-2020-0848 is a remote code execution vulnerability in the ChakraCore scripting engine caused by how it handles objects in memory (Scripting Engine Memory Corruption Vulnerability). Based on the provided data, this affects ChakraCore’s memory handling paths that process objects, leading to hig...

CVE-2020-1180

Technical details about CVE-2020-1180 (affected ChakraCore components, root cause, impact or fixes) are not publicly provided in the supplied documents. Monitor for updates from official sources to obtain concrete technical information.

CVE-2024-38222

Technical details for CVE-2024-38222 are not publicly provided in the connected documents; sources only identify an information disclosure vulnerability in Microsoft Edge (Chromium-based). Monitor official Microsoft advisories for specifics and patch guidance.

CVE-2017-8750

CVE-2017-8750 is a memory corruption vulnerability in Microsoft Browsers (Internet Explorer and Edge) that allows remote code execution in the context of the current user when objects in memory are accessed improperly. Affected software includes Internet Explorer on Windows 7 SP1, Windows Server ...

CVE-2020-0663

CVE-2020-0663 affects Microsoft Edge. The vulnerability is an elevation of privilege caused by Edge not properly enforcing cross-domain policies, enabling an attacker to access data from one domain and inject it into another. Documents repeatedly describe this as a cross-domain policy enforcement...

CVE-2020-0825

Technical details about CVE-2020-0825 are not provided in the supplied documents. Monitoring for updates is advised.

CVE-2021-41351

CVE-2021-41351 refers to spoofing vulnerability in Microsoft Edge (Chromium-based) when used in Internet Explorer (IE) mode. The initial document lists a MEDIUM severity (CVSS v3.1 base score 4.3) with network attack vector and required user interaction, but provides no concrete details on root c...

CVE-2019-1092

Technical details about CVE-2019-1092 are not publicly available in the provided connected documents. Monitor for updates from official advisories and sources for concrete affected products, versions, impact, and fixes.

CVE-2019-1141

The CVE-2019-1141 entry concerns a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge (HTML-based) where memory objects can be corrupted, allowing arbitrary code execution in the current user’s context. Exploitation could grant the attacker the user’s privil...

CVE-2019-1106

Technical details for CVE-2019-1106 are not publicly provided in the supplied documents. No concrete information on affected products, versions, root cause, impact, or fixes is available here. Monitor for updates from official advisories.

CVE-2019-1308

CVE-2019-1308: A remote code execution issue in Microsoft Edge's Chakra engine arises from memory handling of objects. Connected advisories (GHSA/GHSA entries) describe an RCE in the Chakra scripting engine memory corruption vulnerability, noting it is distinct from CVE-2019-1307/1335/1366. The v...

CVE-2019-1062

Technical details about CVE-2019-1062 are not publicly available in the provided connected documents. Monitor for updates from the EUVD entries and GitHub advisories for any concrete information on impact, affected products, or fixes.

CVE-2019-1300

CVE-2019-1300 describes a remote code execution in the Chakra scripting engine used by Microsoft Edge, caused by memory handling in objects in memory. The vulnerability is categorized as HIGH severity (CVSS v3.1 base score 7.5) with network attack vector, high attack complexity, no privileges req...

CVE-2021-1705

Technical details about CVE-2021-1705 are not publicly available in the provided documents. Monitoring for updates is recommended.

CVE-2019-1002

The CVE-2019-1002 entry concerns a remote code execution in Microsoft Edge’s Chakra scripting engine due to memory object handling in HTML-based Edge. The root cause is memory corruption that could allow an attacker to execute arbitrary code in the context of the current user, with full user righ...

CVE-2017-0002

Microsoft Edge: CVE-2017-0002 is a Same Origin Policy bypass in Edge involving about:blank and data: URLs. A remote attacker could entice a user to a malicious page to bypass origin checks and disclose information across domains, effectively elevating access within affected Edge versions. Multipl...

CVE-2019-0992

CVE-2019-0992 : A remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge (HTML-based) allows memory corruption by mismanaging objects in memory. An attacker could exploit this via a specially crafted website or compromised site to run arbitrary code with the cur...

CVE-2019-1103

Technical details for CVE-2019-1103 are not publicly available in the provided connected documents. Monitor for updates from the connected sources (e.g., EUVD/GHSA advisories) for any concrete details.

CVE-2019-1138

Technical details for CVE-2019-1138 are not publicly provided in the connected documents. Based on the materials, no concrete affected products, versions, exploit vectors, or remediation are disclosed. Monitor for updates from official advisories.

CVE-2016-7190

CVE-2016-7190 affects the Chakra JavaScript engine in Microsoft Edge. A memory corruption vulnerability triggered by a crafted web site can lead to remote code execution or a denial of service. Public references tie this family to MS16-119. Mitigation available via patching Edge/Windows as descri...

CVE-2017-11843

CVE-2017-11843 affects ChakraCore and Microsoft Edge; described as a memory-corruption vulnerability in the scripting engine that lets an attacker gain the current user’s rights by manipulating in-memory objects. GHSA advisories indicate impact on Windows 10 (versions 1703 and 1709) and Windows S...

CVE-2019-0911

CVE-2019-0911 corresponds to a remote code execution issue stemming from how the scripting engine handles memory objects in Microsoft browsers. Connected CNVD data describes a memory object handling buffer/overrun vulnerability in Microsoft Internet Explorer (IE9–11) that could allow memory corru...

CVE-2019-0914

Technical details about CVE-2019-0914 are not provided in the supplied documents; no affected products, versions, root cause, or remediation are specified. Monitor for updates.

CVE-2019-1052

CVE-2019-1052 is a remote code execution vulnerability in Microsoft Edge's Chakra scripting engine. It arises from memory corruption when handling objects, potentially allowing code execution with the caller's privileges via a crafted web page. The issue affects Edge HTML-based scenarios and is m...

CVE-2020-1073

CVE-2020-1073 is a remote code execution vulnerability in the ChakraCore scripting engine related to memory handling of objects. Connected CNVD data indicates ChakraCore and Edge are affected. No specific affected versions, exploit details, or remediation/patch information are provided in the sup...

CVE-2020-1219

CVE-2020-1219 affects Microsoft browsers (IE11/Edge) where memory objects are accessed in memory, causing memory corruption. Root cause: improper handling of memory in the browser’s object access path, enabling arbitrary code execution. Impact: remote code execution with the current user’s rights...

CVE-2016-7152

CVE-2016-7152 is described in IBM Security Bulletin as a HEIST-related vulnerability affecting the Firefox component of the IBM Synthetic Playback agent used with IBM Application Performance Management (APM) 8.1.3 and IBM Cloud Application Performance Management. The root cause is that the HTTPS ...

CVE-2019-1051

CVE-2019-1051 is a remote code execution vulnerability in Microsoft Edge’s Chakra scripting engine related to memory handling of objects in memory (HTML-based Edge). Exploitation could allow code execution in the context of the current user, with the attacker potentially attaining the user’s righ...

CVE-2019-1298

Technical details for CVE-2019-1298 are not publicly available in the provided documents. Monitor for updates from the sources in this dataset.

CVE-2019-1307

CVE-2019-1307 is a remote code execution flaw in Microsoft Edge’s Chakra scripting engine caused by memory handling of objects, enabling memory corruption. The issue is corroborated by multiple advisories (GHSA entries) describing an out-of-bounds/write-based Chakra memory corruption with remote ...

CVE-2020-0831

Technical details about CVE-2020-0831 are not publicly available in the provided Connected documents. Monitor for updates from authoritative sources to confirm affected products, impact, and fixes.

CVE-2020-1568

Technical details about CVE-2020-1568 are not publicly provided in the connected documents. The sources reference the Edge PDF Reader RCE but do not supply affected versions, root cause analysis, exploit specifics, or fixes beyond a general description. Monitor for updates.

CVE-2016-3267

CVE-2016-3267 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, enabling remote attackers to determine the existence of unspecified files via a crafted web site (information disclosure). Exploitation details are not provided beyond this remote-disclosure behavior. The vulnerability is ...

CVE-2018-0872

ChakraCore RCE vulnerability affecting ChakraCore and Windows components. The connected advisories describe a memory-correlation flaw in the Chakra scripting engine that enables remote code execution when handling objects in memory, impacting ChakraCore with Windows 10 versions (including 1703/17...

CVE-2018-8383

Technical details about CVE-2018-8383 are not provided in the supplied documents. The connected records reference related CVEs but do not reveal affected products, versions, impact, or fixes for this CVE. Monitor for updates from official sources.

CVE-2019-0991

CVE-2019-0991 is a remote code execution vulnerability in Microsoft Edge’s Chakra scripting engine, caused by memory corruption when handling objects in memory. Exploitation could allow an attacker to execute arbitrary code with the current user’s privileges, potentially taking full control if th...

CVE-2018-0834

Summary: Multiple CVEs describe a remote code execution vulnerability in Microsoft Edge and ChakraCore caused by memory handling in the Chakra scripting engine (“Scripting Engine Memory Corruption Vulnerability”). The connected advisories (GHSA entries) denote ChakraCore RCE affecting Windows 10 ...