CVE-2019-0609

CVE-2019-0609 describes a remote-code-execution vulnerability in the way a Microsoft scripting engine handles in-memory objects, impacting Microsoft browsers. Root cause is memory-handling weakness in the scripting engine, with network access required and user interaction needed. The CVSS metrics...

CVE-2019-0915

Technical details for CVE-2019-0915 are not publicly available in the provided documents. Monitor for updates from official advisories; no concrete exploit, affected product, or remediation details are present in Connected documents.

CVE-2019-1003

The CVE-2019-1003 entry describes a remote code execution in the Chakra scripting engine used by Microsoft Edge (HTML-based). The root cause is a memory corruption flaw caused by how the Chakra engine handles objects in memory, enabling an attacker to run arbitrary code in the context of the curr...

CVE-2019-0989

CVE-2019-0989 is a Chakra Scripting Engine memory corruption vulnerability in Microsoft Edge (HTML-based). The issue could allow remote code execution by corrupting memory in objects handled by Chakra, enabling an attacker to run code with the current user’s rights. The CVSS v3.0 metrics indicate...

CVE-2019-1104

Technical details about CVE-2019-1104 are not provided in the supplied documents. No information on affected products, root cause, impact, or mitigations is available here. Monitor for official disclosures from Microsoft/NVD for updates.

CVE-2016-0060

Affected software: Microsoft Internet Explorer 9–11 and Microsoft Edge. The vulnerability is a memory corruption issue triggered by a crafted website, allowing remote code execution or a denial of service. This CVE is part of a family of related Internet Explorer memory corruption vulnerabilities...

CVE-2017-11791

CVE-2017-11791 is described in the provided documents as an information-disclosure vulnerability affecting the scripting engine in ChakraCore/Internet Explorer. The vulnerability arises from how objects are handled in memory and is reported for Internet Explorer and ChakraCore components on Windo...

CVE-2018-8617

CVE-2018-8617 affects Microsoft Edge and ChakraCore, with a remote code execution vector tied to the Chakra scripting engine’s handling of in‑memory objects. The public description states the root cause as memory corruption within Chakra, leading to high-severity impact (CVE base score 7.5/7.6) a...

CVE-2019-0568

CVE-2019-0568 describes a remote code execution vulnerability in the Chakra scripting engine with memory handling weaknesses in Microsoft Edge/ChakraCore. The root cause is a memory object handling issue in Chakra leading to code execution in the context of the logged-in user. Affected products i...

CVE-2019-0913

Technical details for CVE-2019-0913 are not publicly available in the provided documents; monitor for updates.

CVE-2019-0993

CVE-2019-0993 is a vulnerability in the Microsoft Edge Chakra Scripting Engine where in-memory object handling can lead to remote code execution. The connected GHSA entry confirms a remote code execution path via a web-based exploit against Edge’s Chakra engine, allowing an attacker to run code w...

CVE-2017-0229

CVE-2017-0229 is linked to a remote code execution in Microsoft Edge via memory-corrup­tion flaws in the scripting engine (Edge/Chakra) when handling in-memory objects. The connected advisories describe a ChakraCore/Edge RCE vulnerability with memory-corruption in the JavaScript engine, including...

CVE-2017-8741

CVE-2017-8741 affects Internet Explorer/Edge rendering engines in Windows platforms; the vulnerability arises from how scripting engines render objects in memory, enabling an attacker to execute arbitrary code in the context of the current user. The Nessus-derived details describe a remote-code-e...

CVE-2018-0891

The vulnerability is a ChakraCore/information-disclosure issue in the scripting engine. Public details show that ChakraCore and related components in Microsoft Edge/IE could disclose memory-resident objects due to scripting engine memory handling, affecting ChakraCore-based runtimes and Edge/IE o...

CVE-2019-0925

Technical details about CVE-2019-0925 are not publicly available in the provided documents; the connected EUVD entries mention malware in 'sbrugna' but do not supply vulnerability specifics, affected products, or remediation.

CVE-2019-0927

Technical details for CVE-2019-0927 are not publicly available in the provided documents. Monitor for updates; the connected EUVD entries do not expose concrete affected products, root cause, or remediation information within this set.

CVE-2019-0937

Technical details for CVE-2019-0937 are not provided in the connected documents. Monitor for updates.

CVE-2019-1366

Technical details about CVE-2019-1366 are not provided in the supplied connected documents. The documents lack affected products, root cause, impact, or remediation specifics. Monitor for updates and future disclosures.

CVE-2020-0811

CVE-2020-0811 describes a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge (HTML-based). The issue is tied to memory handling of objects within Chakra, leading to memory corruption that could be exploited to execute arbitrary code. Related entries (e.g., C...

CVE-2019-0861

Based on the connected documents, CVE-2019-0861 maps to a ChakraCore memory-corruption remote code-execution vulnerability in the Chakra scripting engine used by Microsoft Edge. The affected component is ChakraCore’s handling of objects in memory; the root cause is memory corruption. Impact is re...

CVE-2019-0924

Technical details for CVE-2019-0924 are not publicly provided in the supplied connected documents; no affected products, root cause, or remediation details are present. Monitor for updates.

CVE-2019-1024

CVE-2019-1024 corresponds to a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge (HTML-based). The issue arises from memory handling of objects in Chakra, enabling an attacker to corrupt memory and execute arbitrary code in the context of the current user. ...

CVE-2019-1131

CVE-2019-1131 is a remote code execution vulnerability in Microsoft Edge’s Chakra scripting engine, caused by memory handling of objects in HTML-based edge scenarios. An attacker could run arbitrary code with the current user’s privileges via a crafted web page or compromised site; exploitation r...

CVE-2017-11837

CVE-2017-11837 affects ChakraCore/Edge scripting engine memory handling. Root cause: memory corruption when manipulating JavaScript objects in memory, enabling an attacker to execute code with the current user’s privileges. Affected products include ChakraCore and Microsoft Edge on Windows 10 (17...

CVE-2017-11895

CVE-2017-11930 concerns ChakraCore/Edge up through Windows 10 and Windows Server 2016, caused by memory handling in the scripting engine that can permit code execution in the context of the current user. The related advisories describe a “Scripting Engine Memory Corruption Vulnerability” with rem...

CVE-2019-0590

Technical details for CVE-2019-0590 are not provided in the connected documents; monitor for updates.

CVE-2019-1139

CVE-2019-1139 is a remote code execution vulnerability in Microsoft Edge caused by memory handling in the Chakra scripting engine. The flaw allows an attacker to corrupt memory and execute arbitrary code in the context of the current user, potentially gaining full control if the user has admin ri...

CVE-2019-1140

CVE-2019-1140 is a remote code execution in the Chakra memory handling within Microsoft Edge (HTML-based). The vulnerability could allow arbitrary code execution with the current user’s privileges if a user views a malicious page or ad, enabling data access/modification or account creation. The i...

CVE-2020-0969

CVE-2020-0969 is described in the connected documents as a remote code execution vulnerability in the Chakra Scripting Engine used by Microsoft Edge (HTML-based) / ChakraCore. The advisory notes memory corruption when handling in‑memory objects, i.e., a Chakra Scripting Engine Memory Corruption v...

CVE-2017-0032

CVE-2017-0032 describes a remote code execution vulnerability in how Microsoft scripting engines render in-memory objects in Microsoft browsers. The issue allows an attacker to corrupt memory and execute arbitrary code with the current user’s privileges; if the user has administrative rights, the...

CVE-2017-0071

CVE-2017-0134 is tied to a remote code execution vulnerability in Microsoft Edge’s scripting engine, arising from how in-memory objects are handled. The checkpoint advisory CPAI-2018-0053 states that a remote, unauthenticated attacker could lure a user to a crafted page to trigger memory corrupti...

CVE-2017-11912

CVE-2017-11912 is a ChakraCore scripting engine memory corruption vulnerability affecting ChakraCore, IE/Edge on Windows platforms listed in the Initial document. Connected sources describe remote code execution risk due to memory object handling, enabling an attacker to run code in the context o...

CVE-2019-0771

CVE-2019-0771 is a remote code execution vulnerability described as a memory corruption flaw in the Edge scripting engine (Scripting Engine Memory Corruption Vulnerability). Connected sources corroborate related ChakraCore scripting-engine issues and point to a Microsoft advisory as the remediati...

CVE-2016-7194

CVE-2016-7194 concerns the Chakra JavaScript engine used by Microsoft Edge. The connected advisories indicate a remote code execution / memory corruption vulnerability in ChakraCore, exploitable via a crafted web site, and note that this family includes CVE-2016-3386, CVE-2016-3389, and CVE-2016-...

CVE-2017-11846

CVE-2017-11846 affects ChakraCore and Edge/IE scripting engine in Windows 7 SP1, Windows Server 2008/2008 R2, 8.1, 10 (various builds), and Windows Server 2012/2012 R2, with memory handling in the scripting engine leading to memory corruption. The vulnerability could allow an attacker to execute ...

CVE-2018-0762

CVE-2018-0762 concerns memory corruption in Microsoft scripting engines used by Internet Explorer/Edge. Connected reports focus on CVE-2018-0770 (Edge scripting engine memory corruption) as the active remote code execution vulnerability: the issue arises from how the scripting engine handles obje...

CVE-2019-1357

Technical details are not publicly available in the provided documents. No information on affected products, versions, root cause, or remediation is provided. Action: monitor for updates.

CVE-2020-17058

CVE-2020-17058 is described as a Microsoft Browser Memory Corruption Vulnerability. The available details show a memory corruption flaw in the Microsoft Browser, with impact on confidentiality, integrity, and availability rated HIGH (CVSS v3.1: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). The vulnerabil...

CVE-2016-7195

CVE-2016-7195 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, exposing memory corruption via a crafted webpage that can lead to remote code execution or memory DO S. This entry is closely tied to CVE-2016-7198 (a different vulnerability with the same attack surface) and is corroborat...

CVE-2018-0945

CVE-2018-0945 is a remote code execution vulnerability in the Microsoft Edge scripting engine, arising from memory handling of objects and affecting Edge and ChakraCore. The connected advisories corroborate a ChakraCore/Edge memory-corruption issue described as a remote code execution vulnerabili...

CVE-2020-1569

CVE-2020-1569 (Microsoft Edge Memory Corruption) describes a remote code execution when Edge improperly accesses objects in memory, allowing arbitrary code execution in the context of the current user. The underlying issue is memory object handling in Edge, enabling an attacker to run code via a ...

CVE-2017-0068

Technical details (affected product/component/versions/root cause/impact) for CVE-2017-0068 are not publicly provided in the supplied documents. Monitor for updates in connected sources to capture concrete details.

CVE-2017-0141

Technical details for CVE-2017-0141 are not provided in the supplied documents. Public information on affected products, vulnerable components, impact, and remediation cannot be confirmed from these sources; monitor for updates.

CVE-2018-0876

Technical details for CVE-2018-0876 are not publicly available in the provided documents. The connected sources discuss other advisories and updates but do not specify impacted products, root cause, impact, or fixes for this CVE. Monitor for updates.

CVE-2019-0612

CVE-2019-0612 is a security feature bypass in Microsoft Edge where Click2Play protection improperly handles Flash objects. The bypass does not by itself enable arbitrary code execution, but can undermine the protection mechanism. Affected product: Microsoft Edge on Windows; vulnerable component: ...

CVE-2019-0917

Technical details are not publicly available in the provided documents for CVE-2019-0917; monitor for updates from authoritative sources.

CVE-2019-0922

Technical details about CVE-2019-0922 are not publicly available in the provided documents. Monitor for updates from official advisories to determine affected products, impact, and remediation.

CVE-2020-1065

CVE-2020-1065 refers to a remote code execution vulnerability in the ChakraCore scripting engine, caused by memory corruption when handling objects in memory. Affects ChakraCore and, via Microsoft Edge integration, related Chakra components. The impact is that an attacker could execute arbitrary ...

CVE-2024-38156

CVE-2024-38156 affects Microsoft Edge (Chromium-based). The connected sources describe a UI spoofing (SUI) vulnerability in Edge where the web page structure protection is insufficient, enabling a deceptive user interface. Root cause: inadequate protection of page structure allows spoofing of UI ...

CVE-2025-25001

CVE-2025-25001 affects Microsoft Edge (Chromium-based); the issue is an improper neutralization of input during web page generation (XSS) that enables spoofing over a network. Affected product: Microsoft Edge (Chromium-based), including Edge for iOS. Root cause: input handling during page generat...