758 matches found
CVE-2019-1335
Technical details for CVE-2019-1335 are not publicly available in the provided documents. Monitor for updates and potential advisory disclosures.
CVE-2020-1555
CVE-2020-1555 is a memory corruption vulnerability in the Edge HTML-based scripting engine. The vulnerability allows an attacker to execute arbitrary code in the context of the current user, with the potential for full system compromise if the user has admin rights. The issue stems from how the E...
CVE-2019-0567
CVE-2019-0567 is a remote code execution in the Chakra scripting engine used by Microsoft Edge and ChakraCore, stemming from memory handling issues in Chakra. Public exploits are referenced in Exploit-DB (e.g., 46203) and are part of a trio of Edge Chakra memory‑corruption advisories (CVE-2019-05...
CVE-2019-0884
Technical details for CVE-2019-0884 are not publicly available in the provided documents; no affected product/version or exploit guidance are specified. Monitor for updates from official advisories.
CVE-2020-17054
Technical details for CVE-2020-17054 are not publicly provided in the connected documents. Monitor official advisories for updates; no affected product/version or remediation is disclosed here.
CVE-2020-17131
CVE-2020-17131 concerns a memory corruption vulnerability in the Chakra Scripting Engine described in the connected advisories as an out-of-bounds write in Chakra . The linked sources identify the issue as part of Chakra’s scripting engine and associate it with the same CVE across multiple feeds,...
CVE-2016-3325
CVE-2016-3325 affects Microsoft Internet Explorer 11 and Microsoft Edge. A memory handling flaw in IE/Edge enables information disclosure when visiting a crafted site; attack vector is network, with user interaction required (per CVSS3). Exploitation has been observed (CVE-2016-3325 appears in ex...
CVE-2017-0234
CVE-2017-0234 corresponds to a remote code execution in the Chakra JavaScript engine used by Microsoft Edge, triggered by memory handling when rendering objects. Connected advisories confirm a ChakraCore/Edge scripting-engine memory corruption issue; exploitation would arise from the engine’s han...
CVE-2018-1025
CVE-2018-1025 is an information-disclosure vulnerability in affected Microsoft browsers, specifically Internet Explorer 11 and Microsoft Edge, caused by improper handling of objects in memory. The NVD entry states the issue leads to leakage of information but does not provide exploit details, aff...
CVE-2024-38222
Technical details for CVE-2024-38222 are not publicly provided in the connected documents; sources only identify an information disclosure vulnerability in Microsoft Edge (Chromium-based). Monitor official Microsoft advisories for specifics and patch guidance.
CVE-2017-0236
The connected documentation confirms CVE-2017-0236 is a remote code execution vulnerability in Microsoft Edge’s Chakra JavaScript engine related to memory handling of objects, described as a Scripting Engine Memory Corruption vulnerability. The issue is triggered during rendering in memory, enabl...
CVE-2020-0828
Technical details for CVE-2020-0828 are not publicly available in the provided connected documents; no affected products, root cause, impact, or remediation are specified here. Monitor for updates.
CVE-2020-0830
Technical details about CVE-2020-0830 are not provided in the connected documents. Public information for this CVE is not present here. Monitor for updates from official advisories and trusted sources.
CVE-2020-0848
CVE-2020-0848 is a remote code execution vulnerability in the ChakraCore scripting engine caused by how it handles objects in memory (Scripting Engine Memory Corruption Vulnerability). Based on the provided data, this affects ChakraCore’s memory handling paths that process objects, leading to hig...
CVE-2020-0826
Technical details about CVE-2020-0826 are not publicly available in the provided connected documents. No affected products, root cause, or remediation are specified here. Monitor for updates from official advisories and trusted vulnerability feeds.
CVE-2018-8617
CVE-2018-8617 affects Microsoft Edge and ChakraCore, with a remote code execution vector tied to the Chakra scripting engine’s handling of in‑memory objects. The public description states the root cause as memory corruption within Chakra, leading to high-severity impact (CVE base score 7.5/7.6) a...
CVE-2019-1308
CVE-2019-1308: A remote code execution issue in Microsoft Edge's Chakra engine arises from memory handling of objects. Connected advisories (GHSA/GHSA entries) describe an RCE in the Chakra scripting engine memory corruption vulnerability, noting it is distinct from CVE-2019-1307/1335/1366. The v...
CVE-2020-0825
Technical details about CVE-2020-0825 are not provided in the supplied documents. Monitoring for updates is advised.
CVE-2020-1180
Technical details about CVE-2020-1180 (affected ChakraCore components, root cause, impact or fixes) are not publicly provided in the supplied documents. Monitor for updates from official sources to obtain concrete technical information.
CVE-2021-1705
Technical details about CVE-2021-1705 are not publicly available in the provided documents. Monitoring for updates is recommended.
CVE-2016-7190
CVE-2016-7190 affects the Chakra JavaScript engine in Microsoft Edge. A memory corruption vulnerability triggered by a crafted web site can lead to remote code execution or a denial of service. Public references tie this family to MS16-119. Mitigation available via patching Edge/Windows as descri...
CVE-2017-8750
CVE-2017-8750 is a memory corruption vulnerability in Microsoft Browsers (Internet Explorer and Edge) that allows remote code execution in the context of the current user when objects in memory are accessed improperly. Affected software includes Internet Explorer on Windows 7 SP1, Windows Server ...
CVE-2020-0663
CVE-2020-0663 affects Microsoft Edge. The vulnerability is an elevation of privilege caused by Edge not properly enforcing cross-domain policies, enabling an attacker to access data from one domain and inject it into another. Documents repeatedly describe this as a cross-domain policy enforcement...
CVE-2019-1002
The CVE-2019-1002 entry concerns a remote code execution in Microsoft Edge’s Chakra scripting engine due to memory object handling in HTML-based Edge. The root cause is memory corruption that could allow an attacker to execute arbitrary code in the context of the current user, with full user righ...
CVE-2019-1052
CVE-2019-1052 is a remote code execution vulnerability in Microsoft Edge's Chakra scripting engine. It arises from memory corruption when handling objects, potentially allowing code execution with the caller's privileges via a crafted web page. The issue affects Edge HTML-based scenarios and is m...
CVE-2019-1092
Technical details about CVE-2019-1092 are not publicly available in the provided connected documents. Monitor for updates from official advisories and sources for concrete affected products, versions, impact, and fixes.
CVE-2019-1138
Technical details for CVE-2019-1138 are not publicly provided in the connected documents. Based on the materials, no concrete affected products, versions, exploit vectors, or remediation are disclosed. Monitor for updates from official advisories.
CVE-2021-41351
CVE-2021-41351 refers to spoofing vulnerability in Microsoft Edge (Chromium-based) when used in Internet Explorer (IE) mode. The initial document lists a MEDIUM severity (CVSS v3.1 base score 4.3) with network attack vector and required user interaction, but provides no concrete details on root c...
CVE-2019-0992
CVE-2019-0992 : A remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge (HTML-based) allows memory corruption by mismanaging objects in memory. An attacker could exploit this via a specially crafted website or compromised site to run arbitrary code with the cur...
CVE-2019-1106
Technical details for CVE-2019-1106 are not publicly provided in the supplied documents. No concrete information on affected products, versions, root cause, impact, or fixes is available here. Monitor for updates from official advisories.
CVE-2019-1141
The CVE-2019-1141 entry concerns a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge (HTML-based) where memory objects can be corrupted, allowing arbitrary code execution in the current user’s context. Exploitation could grant the attacker the user’s privil...
CVE-2019-1300
CVE-2019-1300 describes a remote code execution in the Chakra scripting engine used by Microsoft Edge, caused by memory handling in objects in memory. The vulnerability is categorized as HIGH severity (CVSS v3.1 base score 7.5) with network attack vector, high attack complexity, no privileges req...
CVE-2016-7152
CVE-2016-7152 is described in IBM Security Bulletin as a HEIST-related vulnerability affecting the Firefox component of the IBM Synthetic Playback agent used with IBM Application Performance Management (APM) 8.1.3 and IBM Cloud Application Performance Management. The root cause is that the HTTPS ...
CVE-2017-0002
Microsoft Edge: CVE-2017-0002 is a Same Origin Policy bypass in Edge involving about:blank and data: URLs. A remote attacker could entice a user to a malicious page to bypass origin checks and disclose information across domains, effectively elevating access within affected Edge versions. Multipl...
CVE-2019-0911
CVE-2019-0911 corresponds to a remote code execution issue stemming from how the scripting engine handles memory objects in Microsoft browsers. Connected CNVD data describes a memory object handling buffer/overrun vulnerability in Microsoft Internet Explorer (IE9–11) that could allow memory corru...
CVE-2019-1062
Technical details about CVE-2019-1062 are not publicly available in the provided connected documents. Monitor for updates from the EUVD entries and GitHub advisories for any concrete information on impact, affected products, or fixes.
CVE-2020-1073
CVE-2020-1073 is a remote code execution vulnerability in the ChakraCore scripting engine related to memory handling of objects. Connected CNVD data indicates ChakraCore and Edge are affected. No specific affected versions, exploit details, or remediation/patch information are provided in the sup...
CVE-2025-25001
CVE-2025-25001 affects Microsoft Edge (Chromium-based); the issue is an improper neutralization of input during web page generation (XSS) that enables spoofing over a network. Affected product: Microsoft Edge (Chromium-based), including Edge for iOS. Root cause: input handling during page generat...
CVE-2019-1051
CVE-2019-1051 is a remote code execution vulnerability in Microsoft Edge’s Chakra scripting engine related to memory handling of objects in memory (HTML-based Edge). Exploitation could allow code execution in the context of the current user, with the attacker potentially attaining the user’s righ...
CVE-2017-8634
CVE-2017-8634 affects Microsoft Edge on Windows 10 1703. It is a memory corruption flaw in the browser’s JavaScript engine when rendering objects in memory, allowing arbitrary code execution in the context of the current user. Public exploit reference exists (Exploit-DB: 42474). The provided Ness...
CVE-2019-0914
Technical details about CVE-2019-0914 are not provided in the supplied documents; no affected products, versions, root cause, or remediation are specified. Monitor for updates.
CVE-2019-1103
Technical details for CVE-2019-1103 are not publicly available in the provided connected documents. Monitor for updates from the connected sources (e.g., EUVD/GHSA advisories) for any concrete details.
CVE-2017-11843
CVE-2017-11843 affects ChakraCore and Microsoft Edge; described as a memory-corruption vulnerability in the scripting engine that lets an attacker gain the current user’s rights by manipulating in-memory objects. GHSA advisories indicate impact on Windows 10 (versions 1703 and 1709) and Windows S...
CVE-2018-0872
ChakraCore RCE vulnerability affecting ChakraCore and Windows components. The connected advisories describe a memory-correlation flaw in the Chakra scripting engine that enables remote code execution when handling objects in memory, impacting ChakraCore with Windows 10 versions (including 1703/17...
CVE-2019-1298
Technical details for CVE-2019-1298 are not publicly available in the provided documents. Monitor for updates from the sources in this dataset.
CVE-2019-1307
CVE-2019-1307 is a remote code execution flaw in Microsoft Edge’s Chakra scripting engine caused by memory handling of objects, enabling memory corruption. The issue is corroborated by multiple advisories (GHSA entries) describing an out-of-bounds/write-based Chakra memory corruption with remote ...
CVE-2020-0831
Technical details about CVE-2020-0831 are not publicly available in the provided Connected documents. Monitor for updates from authoritative sources to confirm affected products, impact, and fixes.
CVE-2020-1219
CVE-2020-1219 affects Microsoft browsers (IE11/Edge) where memory objects are accessed in memory, causing memory corruption. Root cause: improper handling of memory in the browser’s object access path, enabling arbitrary code execution. Impact: remote code execution with the current user’s rights...
CVE-2018-0834
Summary: Multiple CVEs describe a remote code execution vulnerability in Microsoft Edge and ChakraCore caused by memory handling in the Chakra scripting engine (“Scripting Engine Memory Corruption Vulnerability”). The connected advisories (GHSA entries) denote ChakraCore RCE affecting Windows 10 ...
CVE-2018-8383
Technical details about CVE-2018-8383 are not provided in the supplied documents. The connected records reference related CVEs but do not reveal affected products, versions, impact, or fixes for this CVE. Monitor for updates from official sources.