Lucene search
+L
MicrosoftEdge

758 matches found

CVE
CVE
added 2019/10/10 1:28 p.m.155 views

CVE-2019-1335

Technical details for CVE-2019-1335 are not publicly available in the provided documents. Monitor for updates and potential advisory disclosures.

7.6CVSS7.4AI score0.1017EPSS
Save
CVE
CVE
added 2020/08/17 7:13 p.m.155 views

CVE-2020-1555

CVE-2020-1555 is a memory corruption vulnerability in the Edge HTML-based scripting engine. The vulnerability allows an attacker to execute arbitrary code in the context of the current user, with the potential for full system compromise if the user has admin rights. The issue stems from how the E...

9.3CVSS9.1AI score0.0451EPSS
Save
CVE
CVE
added 2019/01/08 9:00 p.m.152 views

CVE-2019-0567

CVE-2019-0567 is a remote code execution in the Chakra scripting engine used by Microsoft Edge and ChakraCore, stemming from memory handling issues in Chakra. Public exploits are referenced in Exploit-DB (e.g., 46203) and are part of a trio of Edge Chakra memory‑corruption advisories (CVE-2019-05...

7.6CVSS7.4AI score0.7999EPSS
Save
CVE
CVE
added 2019/05/16 6:17 p.m.152 views

CVE-2019-0884

Technical details for CVE-2019-0884 are not publicly available in the provided documents; no affected product/version or exploit guidance are specified. Monitor for updates from official advisories.

7.6CVSS7.3AI score0.07513EPSS
Save
CVE
CVE
added 2020/11/11 6:48 a.m.151 views

CVE-2020-17054

Technical details for CVE-2020-17054 are not publicly provided in the connected documents. Monitor official advisories for updates; no affected product/version or remediation is disclosed here.

7.6CVSS4.4AI score0.02067EPSS
Save
CVE
CVE
added 2020/12/09 11:36 p.m.151 views

CVE-2020-17131

CVE-2020-17131 concerns a memory corruption vulnerability in the Chakra Scripting Engine described in the connected advisories as an out-of-bounds write in Chakra . The linked sources identify the issue as part of Chakra’s scripting engine and associate it with the same CVE across multiple feeds,...

7.5CVSS4.5AI score0.01753EPSS
Save
CVE
CVE
added 2016/09/14 10:00 a.m.149 views

CVE-2016-3325

CVE-2016-3325 affects Microsoft Internet Explorer 11 and Microsoft Edge. A memory handling flaw in IE/Edge enables information disclosure when visiting a crafted site; attack vector is network, with user interaction required (per CVSS3). Exploitation has been observed (CVE-2016-3325 appears in ex...

3.1CVSS4.7AI score0.53914EPSS
SaveWeb
CVE
CVE
added 2017/05/12 2:00 p.m.147 views

CVE-2017-0234

CVE-2017-0234 corresponds to a remote code execution in the Chakra JavaScript engine used by Microsoft Edge, triggered by memory handling when rendering objects. Connected advisories confirm a ChakraCore/Edge scripting-engine memory corruption issue; exploitation would arise from the engine’s han...

7.6CVSS7.7AI score0.38115EPSS
Save
CVE
CVE
added 2018/05/09 7:00 p.m.146 views

CVE-2018-1025

CVE-2018-1025 is an information-disclosure vulnerability in affected Microsoft browsers, specifically Internet Explorer 11 and Microsoft Edge, caused by improper handling of objects in memory. The NVD entry states the issue leads to leakage of information but does not provide exploit details, aff...

4.3CVSS5.4AI score0.06316EPSS
Save
CVE
CVE
added 2024/09/12 3:06 a.m.145 views

CVE-2024-38222

Technical details for CVE-2024-38222 are not publicly provided in the connected documents; sources only identify an information disclosure vulnerability in Microsoft Edge (Chromium-based). Monitor official Microsoft advisories for specifics and patch guidance.

6.5CVSS6.1AI score0.0119EPSS
Save
CVE
CVE
added 2017/05/12 2:00 p.m.143 views

CVE-2017-0236

The connected documentation confirms CVE-2017-0236 is a remote code execution vulnerability in Microsoft Edge’s Chakra JavaScript engine related to memory handling of objects, described as a Scripting Engine Memory Corruption vulnerability. The issue is triggered during rendering in memory, enabl...

7.6CVSS7.7AI score0.31582EPSS
Save
CVE
CVE
added 2020/03/12 3:48 p.m.142 views

CVE-2020-0828

Technical details for CVE-2020-0828 are not publicly available in the provided connected documents; no affected products, root cause, impact, or remediation are specified here. Monitor for updates.

7.6CVSS7.8AI score0.08854EPSS
Save
CVE
CVE
added 2020/03/12 3:48 p.m.140 views

CVE-2020-0830

Technical details about CVE-2020-0830 are not provided in the connected documents. Public information for this CVE is not present here. Monitor for updates from official advisories and trusted sources.

7.6CVSS7.7AI score0.08733EPSS
Save
CVE
CVE
added 2020/03/12 3:48 p.m.140 views

CVE-2020-0848

CVE-2020-0848 is a remote code execution vulnerability in the ChakraCore scripting engine caused by how it handles objects in memory (Scripting Engine Memory Corruption Vulnerability). Based on the provided data, this affects ChakraCore’s memory handling paths that process objects, leading to hig...

7.6CVSS7.8AI score0.09592EPSS
Save
CVE
CVE
added 2020/03/12 3:48 p.m.139 views

CVE-2020-0826

Technical details about CVE-2020-0826 are not publicly available in the provided connected documents. No affected products, root cause, or remediation are specified here. Monitor for updates from official advisories and trusted vulnerability feeds.

7.6CVSS7.8AI score0.08854EPSS
Save
CVE
CVE
added 2018/12/12 12:00 a.m.138 views

CVE-2018-8617

CVE-2018-8617 affects Microsoft Edge and ChakraCore, with a remote code execution vector tied to the Chakra scripting engine’s handling of in‑memory objects. The public description states the root cause as memory corruption within Chakra, leading to high-severity impact (CVE base score 7.5/7.6) a...

7.6CVSS6.8AI score0.62483EPSS
Save
CVE
CVE
added 2019/10/10 1:28 p.m.138 views

CVE-2019-1308

CVE-2019-1308: A remote code execution issue in Microsoft Edge's Chakra engine arises from memory handling of objects. Connected advisories (GHSA/GHSA entries) describe an RCE in the Chakra scripting engine memory corruption vulnerability, noting it is distinct from CVE-2019-1307/1335/1366. The v...

7.6CVSS7.4AI score0.10377EPSS
Save
CVE
CVE
added 2020/03/12 3:48 p.m.138 views

CVE-2020-0825

Technical details about CVE-2020-0825 are not provided in the supplied documents. Monitoring for updates is advised.

7.6CVSS7.8AI score0.13303EPSS
Save
CVE
CVE
added 2020/09/11 5:09 p.m.138 views

CVE-2020-1180

Technical details about CVE-2020-1180 (affected ChakraCore components, root cause, impact or fixes) are not publicly provided in the supplied documents. Monitor for updates from official sources to obtain concrete technical information.

7.6CVSS7.2AI score0.02067EPSS
Save
CVE
CVE
added 2021/01/12 7:42 p.m.138 views

CVE-2021-1705

Technical details about CVE-2021-1705 are not publicly available in the provided documents. Monitoring for updates is recommended.

7.6CVSS6.1AI score0.01916EPSS
Save
CVE
CVE
added 2016/10/14 1:00 a.m.137 views

CVE-2016-7190

CVE-2016-7190 affects the Chakra JavaScript engine in Microsoft Edge. A memory corruption vulnerability triggered by a crafted web site can lead to remote code execution or a denial of service. Public references tie this family to MS16-119. Mitigation available via patching Edge/Windows as descri...

7.6CVSS7.6AI score0.66919EPSS
Save
CVE
CVE
added 2017/09/13 1:00 a.m.137 views

CVE-2017-8750

CVE-2017-8750 is a memory corruption vulnerability in Microsoft Browsers (Internet Explorer and Edge) that allows remote code execution in the context of the current user when objects in memory are accessed improperly. Affected software includes Internet Explorer on Windows 7 SP1, Windows Server ...

7.6CVSS7.1AI score0.09202EPSS
Save
CVE
CVE
added 2020/02/11 9:22 p.m.137 views

CVE-2020-0663

CVE-2020-0663 affects Microsoft Edge. The vulnerability is an elevation of privilege caused by Edge not properly enforcing cross-domain policies, enabling an attacker to access data from one domain and inject it into another. Documents repeatedly describe this as a cross-domain policy enforcement...

4.2CVSS5.5AI score0.01573EPSS
Save
CVE
CVE
added 2019/06/12 1:49 p.m.136 views

CVE-2019-1002

The CVE-2019-1002 entry concerns a remote code execution in Microsoft Edge’s Chakra scripting engine due to memory object handling in HTML-based Edge. The root cause is memory corruption that could allow an attacker to execute arbitrary code in the context of the current user, with full user righ...

7.6CVSS6.6AI score0.02354EPSS
Save
CVE
CVE
added 2019/06/12 1:49 p.m.136 views

CVE-2019-1052

CVE-2019-1052 is a remote code execution vulnerability in Microsoft Edge's Chakra scripting engine. It arises from memory corruption when handling objects, potentially allowing code execution with the caller's privileges via a crafted web page. The issue affects Edge HTML-based scenarios and is m...

7.6CVSS6.6AI score0.02403EPSS
Save
CVE
CVE
added 2019/07/15 6:56 p.m.136 views

CVE-2019-1092

Technical details about CVE-2019-1092 are not publicly available in the provided connected documents. Monitor for updates from official advisories and sources for concrete affected products, versions, impact, and fixes.

7.6CVSS7.4AI score0.08948EPSS
Save
CVE
CVE
added 2019/09/11 9:24 p.m.136 views

CVE-2019-1138

Technical details for CVE-2019-1138 are not publicly provided in the connected documents. Based on the materials, no concrete affected products, versions, exploit vectors, or remediation are disclosed. Monitor for updates from official advisories.

7.6CVSS7.4AI score0.08673EPSS
Save
CVE
CVE
added 2021/11/10 12:46 a.m.136 views

CVE-2021-41351

CVE-2021-41351 refers to spoofing vulnerability in Microsoft Edge (Chromium-based) when used in Internet Explorer (IE) mode. The initial document lists a MEDIUM severity (CVSS v3.1 base score 4.3) with network attack vector and required user interaction, but provides no concrete details on root c...

4.3CVSS6.4AI score0.03671EPSS
Save
CVE
CVE
added 2019/06/12 1:49 p.m.135 views

CVE-2019-0992

CVE-2019-0992 : A remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge (HTML-based) allows memory corruption by mismanaging objects in memory. An attacker could exploit this via a specially crafted website or compromised site to run arbitrary code with the cur...

7.6CVSS6.7AI score0.0256EPSS
Save
CVE
CVE
added 2019/07/29 2:08 p.m.135 views

CVE-2019-1106

Technical details for CVE-2019-1106 are not publicly provided in the supplied documents. No concrete information on affected products, versions, root cause, impact, or fixes is available here. Monitor for updates from official advisories.

7.6CVSS7.4AI score0.09205EPSS
Save
CVE
CVE
added 2019/08/14 8:55 p.m.135 views

CVE-2019-1141

The CVE-2019-1141 entry concerns a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge (HTML-based) where memory objects can be corrupted, allowing arbitrary code execution in the current user’s context. Exploitation could grant the attacker the user’s privil...

7.6CVSS7.6AI score0.01883EPSS
Save
CVE
CVE
added 2019/09/11 9:25 p.m.135 views

CVE-2019-1300

CVE-2019-1300 describes a remote code execution in the Chakra scripting engine used by Microsoft Edge, caused by memory handling in objects in memory. The vulnerability is categorized as HIGH severity (CVSS v3.1 base score 7.5) with network attack vector, high attack complexity, no privileges req...

7.6CVSS7.4AI score0.08673EPSS
Save
CVE
CVE
added 2016/09/06 10:00 a.m.134 views

CVE-2016-7152

CVE-2016-7152 is described in IBM Security Bulletin as a HEIST-related vulnerability affecting the Firefox component of the IBM Synthetic Playback agent used with IBM Application Performance Management (APM) 8.1.3 and IBM Cloud Application Performance Management. The root cause is that the HTTPS ...

5.3CVSS4.9AI score0.13983EPSS
Save
CVE
CVE
added 2017/01/10 9:00 p.m.134 views

CVE-2017-0002

Microsoft Edge: CVE-2017-0002 is a Same Origin Policy bypass in Edge involving about:blank and data: URLs. A remote attacker could entice a user to a malicious page to bypass origin checks and disclose information across domains, effectively elevating access within affected Edge versions. Multipl...

8.8CVSS8.3AI score0.1489EPSS
SaveWeb
CVE
CVE
added 2019/05/16 6:17 p.m.134 views

CVE-2019-0911

CVE-2019-0911 corresponds to a remote code execution issue stemming from how the scripting engine handles memory objects in Microsoft browsers. Connected CNVD data describes a memory object handling buffer/overrun vulnerability in Microsoft Internet Explorer (IE9–11) that could allow memory corru...

7.6CVSS7.3AI score0.09089EPSS
Save
CVE
CVE
added 2019/07/15 6:56 p.m.134 views

CVE-2019-1062

Technical details about CVE-2019-1062 are not publicly available in the provided connected documents. Monitor for updates from the EUVD entries and GitHub advisories for any concrete information on impact, affected products, or fixes.

7.6CVSS7.4AI score0.08948EPSS
Save
CVE
CVE
added 2020/06/09 7:43 p.m.134 views

CVE-2020-1073

CVE-2020-1073 is a remote code execution vulnerability in the ChakraCore scripting engine related to memory handling of objects. Connected CNVD data indicates ChakraCore and Edge are affected. No specific affected versions, exploit details, or remediation/patch information are provided in the sup...

9.3CVSS7.9AI score0.08642EPSS
Save
CVE
CVE
added 2025/04/04 12:00 a.m.134 views

CVE-2025-25001

CVE-2025-25001 affects Microsoft Edge (Chromium-based); the issue is an improper neutralization of input during web page generation (XSS) that enables spoofing over a network. Affected product: Microsoft Edge (Chromium-based), including Edge for iOS. Root cause: input handling during page generat...

4.3CVSS6.9AI score0.00708EPSS
Save
CVE
CVE
added 2019/06/12 1:49 p.m.133 views

CVE-2019-1051

CVE-2019-1051 is a remote code execution vulnerability in Microsoft Edge’s Chakra scripting engine related to memory handling of objects in memory (HTML-based Edge). Exploitation could allow code execution in the context of the current user, with the attacker potentially attaining the user’s righ...

7.6CVSS6.7AI score0.04124EPSS
Save
CVE
CVE
added 2017/08/08 9:00 p.m.132 views

CVE-2017-8634

CVE-2017-8634 affects Microsoft Edge on Windows 10 1703. It is a memory corruption flaw in the browser’s JavaScript engine when rendering objects in memory, allowing arbitrary code execution in the context of the current user. Public exploit reference exists (Exploit-DB: 42474). The provided Ness...

7.6CVSS7.8AI score0.7028EPSS
Save
CVE
CVE
added 2019/05/16 6:17 p.m.132 views

CVE-2019-0914

Technical details about CVE-2019-0914 are not provided in the supplied documents; no affected products, versions, root cause, or remediation are specified. Monitor for updates.

7.6CVSS7.5AI score0.09215EPSS
Save
CVE
CVE
added 2019/07/29 1:58 p.m.132 views

CVE-2019-1103

Technical details for CVE-2019-1103 are not publicly available in the provided connected documents. Monitor for updates from the connected sources (e.g., EUVD/GHSA advisories) for any concrete details.

7.6CVSS7.4AI score0.09205EPSS
Save
CVE
CVE
added 2017/11/15 3:00 a.m.131 views

CVE-2017-11843

CVE-2017-11843 affects ChakraCore and Microsoft Edge; described as a memory-corruption vulnerability in the scripting engine that lets an attacker gain the current user’s rights by manipulating in-memory objects. GHSA advisories indicate impact on Windows 10 (versions 1703 and 1709) and Windows S...

7.6CVSS7.5AI score0.08474EPSS
Save
CVE
CVE
added 2018/03/14 5:00 p.m.130 views

CVE-2018-0872

ChakraCore RCE vulnerability affecting ChakraCore and Windows components. The connected advisories describe a memory-correlation flaw in the Chakra scripting engine that enables remote code execution when handling objects in memory, impacting ChakraCore with Windows 10 versions (including 1703/17...

7.6CVSS7.2AI score0.16034EPSS
Save
CVE
CVE
added 2019/09/11 9:25 p.m.130 views

CVE-2019-1298

Technical details for CVE-2019-1298 are not publicly available in the provided documents. Monitor for updates from the sources in this dataset.

7.6CVSS7.4AI score0.08673EPSS
Save
CVE
CVE
added 2019/10/10 1:28 p.m.130 views

CVE-2019-1307

CVE-2019-1307 is a remote code execution flaw in Microsoft Edge’s Chakra scripting engine caused by memory handling of objects, enabling memory corruption. The issue is corroborated by multiple advisories (GHSA entries) describing an out-of-bounds/write-based Chakra memory corruption with remote ...

7.6CVSS7.4AI score0.10377EPSS
Save
CVE
CVE
added 2020/03/12 3:48 p.m.130 views

CVE-2020-0831

Technical details about CVE-2020-0831 are not publicly available in the provided Connected documents. Monitor for updates from authoritative sources to confirm affected products, impact, and fixes.

7.6CVSS7.8AI score0.08854EPSS
Save
CVE
CVE
added 2020/06/09 7:43 p.m.130 views

CVE-2020-1219

CVE-2020-1219 affects Microsoft browsers (IE11/Edge) where memory objects are accessed in memory, causing memory corruption. Root cause: improper handling of memory in the browser’s object access path, enabling arbitrary code execution. Impact: remote code execution with the current user’s rights...

7.6CVSS8.1AI score0.19057EPSS
Save
CVE
CVE
added 2018/02/15 2:00 a.m.129 views

CVE-2018-0834

Summary: Multiple CVEs describe a remote code execution vulnerability in Microsoft Edge and ChakraCore caused by memory handling in the Chakra scripting engine (“Scripting Engine Memory Corruption Vulnerability”). The connected advisories (GHSA entries) denote ChakraCore RCE affecting Windows 10 ...

9.3CVSS7.3AI score0.54927EPSS
Save
CVE
CVE
added 2018/08/15 5:00 p.m.129 views

CVE-2018-8383

Technical details about CVE-2018-8383 are not provided in the supplied documents. The connected records reference related CVEs but do not reveal affected products, versions, impact, or fixes for this CVE. Monitor for updates from official sources.

4.3CVSS5.6AI score0.06846EPSS
Save
Total number of security vulnerabilities758