758 matches found
CVE-2019-0991
CVE-2019-0991 is a remote code execution vulnerability in Microsoft Edge’s Chakra scripting engine, caused by memory corruption when handling objects in memory. Exploitation could allow an attacker to execute arbitrary code with the current user’s privileges, potentially taking full control if th...
CVE-2019-1298
Technical details for CVE-2019-1298 are not publicly available in the provided documents. Monitor for updates from the sources in this dataset.
CVE-2018-8383
Technical details about CVE-2018-8383 are not provided in the supplied documents. The connected records reference related CVEs but do not reveal affected products, versions, impact, or fixes for this CVE. Monitor for updates from official sources.
CVE-2019-0568
CVE-2019-0568 describes a remote code execution vulnerability in the Chakra scripting engine with memory handling weaknesses in Microsoft Edge/ChakraCore. The root cause is a memory object handling issue in Chakra leading to code execution in the context of the logged-in user. Affected products i...
CVE-2019-0915
Technical details for CVE-2019-0915 are not publicly available in the provided documents. Monitor for updates from official advisories; no concrete exploit, affected product, or remediation details are present in Connected documents.
CVE-2019-0989
CVE-2019-0989 is a Chakra Scripting Engine memory corruption vulnerability in Microsoft Edge (HTML-based). The issue could allow remote code execution by corrupting memory in objects handled by Chakra, enabling an attacker to run code with the current user’s rights. The CVSS v3.0 metrics indicate...
CVE-2019-1104
Technical details about CVE-2019-1104 are not provided in the supplied documents. No information on affected products, root cause, impact, or mitigations is available here. Monitor for official disclosures from Microsoft/NVD for updates.
CVE-2016-0060
Affected software: Microsoft Internet Explorer 9–11 and Microsoft Edge. The vulnerability is a memory corruption issue triggered by a crafted website, allowing remote code execution or a denial of service. This CVE is part of a family of related Internet Explorer memory corruption vulnerabilities...
CVE-2019-0913
Technical details for CVE-2019-0913 are not publicly available in the provided documents; monitor for updates.
CVE-2020-1568
Technical details about CVE-2020-1568 are not publicly provided in the connected documents. The sources reference the Edge PDF Reader RCE but do not supply affected versions, root cause analysis, exploit specifics, or fixes beyond a general description. Monitor for updates.
CVE-2019-0861
Based on the connected documents, CVE-2019-0861 maps to a ChakraCore memory-corruption remote code-execution vulnerability in the Chakra scripting engine used by Microsoft Edge. The affected component is ChakraCore’s handling of objects in memory; the root cause is memory corruption. Impact is re...
CVE-2019-0993
CVE-2019-0993 is a vulnerability in the Microsoft Edge Chakra Scripting Engine where in-memory object handling can lead to remote code execution. The connected GHSA entry confirms a remote code execution path via a web-based exploit against Edge’s Chakra engine, allowing an attacker to run code w...
CVE-2019-1003
The CVE-2019-1003 entry describes a remote code execution in the Chakra scripting engine used by Microsoft Edge (HTML-based). The root cause is a memory corruption flaw caused by how the Chakra engine handles objects in memory, enabling an attacker to run arbitrary code in the context of the curr...
CVE-2017-11791
CVE-2017-11791 is described in the provided documents as an information-disclosure vulnerability affecting the scripting engine in ChakraCore/Internet Explorer. The vulnerability arises from how objects are handled in memory and is reported for Internet Explorer and ChakraCore components on Windo...
CVE-2018-0762
CVE-2018-0762 concerns memory corruption in Microsoft scripting engines used by Internet Explorer/Edge. Connected reports focus on CVE-2018-0770 (Edge scripting engine memory corruption) as the active remote code execution vulnerability: the issue arises from how the scripting engine handles obje...
CVE-2018-0891
The vulnerability is a ChakraCore/information-disclosure issue in the scripting engine. Public details show that ChakraCore and related components in Microsoft Edge/IE could disclose memory-resident objects due to scripting engine memory handling, affecting ChakraCore-based runtimes and Edge/IE o...
CVE-2019-0927
Technical details for CVE-2019-0927 are not publicly available in the provided documents. Monitor for updates; the connected EUVD entries do not expose concrete affected products, root cause, or remediation information within this set.
CVE-2019-1366
Technical details about CVE-2019-1366 are not provided in the supplied connected documents. The documents lack affected products, root cause, impact, or remediation specifics. Monitor for updates and future disclosures.
CVE-2017-8741
CVE-2017-8741 affects Internet Explorer/Edge rendering engines in Windows platforms; the vulnerability arises from how scripting engines render objects in memory, enabling an attacker to execute arbitrary code in the context of the current user. The Nessus-derived details describe a remote-code-e...
CVE-2019-0771
CVE-2019-0771 is a remote code execution vulnerability described as a memory corruption flaw in the Edge scripting engine (Scripting Engine Memory Corruption Vulnerability). Connected sources corroborate related ChakraCore scripting-engine issues and point to a Microsoft advisory as the remediati...
CVE-2019-0925
Technical details about CVE-2019-0925 are not publicly available in the provided documents; the connected EUVD entries mention malware in 'sbrugna' but do not supply vulnerability specifics, affected products, or remediation.
CVE-2019-0937
Technical details for CVE-2019-0937 are not provided in the connected documents. Monitor for updates.
CVE-2020-0811
CVE-2020-0811 describes a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge (HTML-based). The issue is tied to memory handling of objects within Chakra, leading to memory corruption that could be exploited to execute arbitrary code. Related entries (e.g., C...
CVE-2019-0924
Technical details for CVE-2019-0924 are not publicly provided in the supplied connected documents; no affected products, root cause, or remediation details are present. Monitor for updates.
CVE-2019-1195
The CVE-2019-1195 entry describes a remote code-execution vulnerability in Microsoft Edge’s Chakra scripting engine, arising from memory handling of objects. Affected component: ChakraCore/Edge HTML-based runtime. Root cause: memory corruption due to object handling in Chakra, enabling arbitrary ...
CVE-2017-0229
CVE-2017-0229 is linked to a remote code execution in Microsoft Edge via memory-corruption flaws in the scripting engine (Edge/Chakra) when handling in-memory objects. The connected advisories describe a ChakraCore/Edge RCE vulnerability with memory-corruption in the JavaScript engine, including...
CVE-2018-0945
CVE-2018-0945 is a remote code execution vulnerability in the Microsoft Edge scripting engine, arising from memory handling of objects and affecting Edge and ChakraCore. The connected advisories corroborate a ChakraCore/Edge memory-corruption issue described as a remote code execution vulnerabili...
CVE-2019-1197
CVE-2019-1197 concerns a remote code execution vulnerability in Microsoft Edge’s Chakra scripting engine (HTML-based) due to memory handling of objects leading to memory corruption. The affected component is the Chakra engine used in Edge; exploitation could allow code execution with the attacker...
CVE-2017-0071
CVE-2017-0134 is tied to a remote code execution vulnerability in Microsoft Edge’s scripting engine, arising from how in-memory objects are handled. The checkpoint advisory CPAI-2018-0053 states that a remote, unauthenticated attacker could lure a user to a crafted page to trigger memory corrupti...
CVE-2017-11837
CVE-2017-11837 affects ChakraCore/Edge scripting engine memory handling. Root cause: memory corruption when manipulating JavaScript objects in memory, enabling an attacker to execute code with the current user’s privileges. Affected products include ChakraCore and Microsoft Edge on Windows 10 (17...
CVE-2017-11895
CVE-2017-11930 concerns ChakraCore/Edge up through Windows 10 and Windows Server 2016, caused by memory handling in the scripting engine that can permit code execution in the context of the current user. The related advisories describe a “Scripting Engine Memory Corruption Vulnerability” with rem...
CVE-2019-0590
Technical details for CVE-2019-0590 are not provided in the connected documents; monitor for updates.
CVE-2019-1131
CVE-2019-1131 is a remote code execution vulnerability in Microsoft Edge’s Chakra scripting engine, caused by memory handling of objects in HTML-based edge scenarios. An attacker could run arbitrary code with the current user’s privileges via a crafted web page or compromised site; exploitation r...
CVE-2018-0840
Technical details specific to CVE-2018-0840 are not provided in the connected documents. The GHSA advisories describe ChakraCore memory corruption vulnerabilities in general, but do not disclose affected products/versions or impacts for this CVE. Monitor for updates.
CVE-2018-8467
CVE-2018-8467 is a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge and ChakraCore, caused by memory handling of objects. The issue enables code execution via crafted objects in memory and is associated with exploitation in the wild (Exploit-DB entries htt...
CVE-2019-1139
CVE-2019-1139 is a remote code execution vulnerability in Microsoft Edge caused by memory handling in the Chakra scripting engine. The flaw allows an attacker to corrupt memory and execute arbitrary code in the context of the current user, potentially gaining full control if the user has admin ri...
CVE-2019-1357
Technical details are not publicly available in the provided documents. No information on affected products, versions, root cause, or remediation is provided. Action: monitor for updates.
CVE-2020-0969
CVE-2020-0969 is described in the connected documents as a remote code execution vulnerability in the Chakra Scripting Engine used by Microsoft Edge (HTML-based) / ChakraCore. The advisory notes memory corruption when handling in‑memory objects, i.e., a Chakra Scripting Engine Memory Corruption v...
CVE-2016-7194
CVE-2016-7194 concerns the Chakra JavaScript engine used by Microsoft Edge. The connected advisories indicate a remote code execution / memory corruption vulnerability in ChakraCore, exploitable via a crafted web site, and note that this family includes CVE-2016-3386, CVE-2016-3389, and CVE-2016-...
CVE-2017-0235
CVE-2017-0235 corresponds to a remote code execution vulnerability in Microsoft Edge tied to Chakra's memory handling when rendering objects. The connected advisories describe a memory corruption issue in the Chakra JavaScript engine that could be triggered to execute arbitrary code, affecting Ed...
CVE-2017-11846
CVE-2017-11846 affects ChakraCore and Edge/IE scripting engine in Windows 7 SP1, Windows Server 2008/2008 R2, 8.1, 10 (various builds), and Windows Server 2012/2012 R2, with memory handling in the scripting engine leading to memory corruption. The vulnerability could allow an attacker to execute ...
CVE-2017-11873
Technical details for CVE-2017-11873 are not publicly provided in the supplied documents; related advisories discuss ChakraCore memory corruption broadly. Monitor for updates from Microsoft/Edge security advisories for affected versions and fixes.
CVE-2017-11912
CVE-2017-11912 is a ChakraCore scripting engine memory corruption vulnerability affecting ChakraCore, IE/Edge on Windows platforms listed in the Initial document. Connected sources describe remote code execution risk due to memory object handling, enabling an attacker to run code in the context o...
CVE-2019-1024
CVE-2019-1024 corresponds to a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge (HTML-based). The issue arises from memory handling of objects in Chakra, enabling an attacker to corrupt memory and execute arbitrary code in the context of the current user. ...
CVE-2019-1140
CVE-2019-1140 is a remote code execution in the Chakra memory handling within Microsoft Edge (HTML-based). The vulnerability could allow arbitrary code execution with the current user’s privileges if a user views a malicious page or ad, enabling data access/modification or account creation. The i...
CVE-2021-26436
Technical details about CVE-2021-26436 (affected component, root cause, exploitability, impact, and fixed version) are not provided in the connected documents. Monitor official advisories (e.g., Microsoft/MSRC) for updates and patches.
CVE-2016-7195
CVE-2016-7195 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, exposing memory corruption via a crafted webpage that can lead to remote code execution or memory DO S. This entry is closely tied to CVE-2016-7198 (a different vulnerability with the same attack surface) and is corroborat...
CVE-2017-0141
Technical details for CVE-2017-0141 are not provided in the supplied documents. Public information on affected products, vulnerable components, impact, and remediation cannot be confirmed from these sources; monitor for updates.
CVE-2018-0758
CVE-2018-0758 affects Microsoft Edge’s Scripting Engine memory handling on Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016. The vulnerability enables remote code execution in the context of the current user due to how objects are managed in memory. Connected documents corroborat...
CVE-2018-8466
CVE-2018-8466 details a remote code execution in the Chakra scripting engine used by Microsoft Edge and ChakraCore, caused by memory object handling vulnerabilities. The initial entry notes a memory corruption/RC vulnerability, with Edge/ChakraCore as affected. Connected sources corroborate Chakr...