758 matches found
CVE-2019-0991
CVE-2019-0991 is a remote code execution vulnerability in Microsoft Edge’s Chakra scripting engine, caused by memory corruption when handling objects in memory. Exploitation could allow an attacker to execute arbitrary code with the current user’s privileges, potentially taking full control if th...
CVE-2016-3267
CVE-2016-3267 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, enabling remote attackers to determine the existence of unspecified files via a crafted web site (information disclosure). Exploitation details are not provided beyond this remote-disclosure behavior. The vulnerability is ...
CVE-2019-0609
CVE-2019-0609 describes a remote-code-execution vulnerability in the way a Microsoft scripting engine handles in-memory objects, impacting Microsoft browsers. Root cause is memory-handling weakness in the scripting engine, with network access required and user interaction needed. The CVSS metrics...
CVE-2019-0913
Technical details for CVE-2019-0913 are not publicly available in the provided documents; monitor for updates.
CVE-2019-1104
Technical details about CVE-2019-1104 are not provided in the supplied documents. No information on affected products, root cause, impact, or mitigations is available here. Monitor for official disclosures from Microsoft/NVD for updates.
CVE-2020-1568
Technical details about CVE-2020-1568 are not publicly provided in the connected documents. The sources reference the Edge PDF Reader RCE but do not supply affected versions, root cause analysis, exploit specifics, or fixes beyond a general description. Monitor for updates.
CVE-2019-0568
CVE-2019-0568 describes a remote code execution vulnerability in the Chakra scripting engine with memory handling weaknesses in Microsoft Edge/ChakraCore. The root cause is a memory object handling issue in Chakra leading to code execution in the context of the logged-in user. Affected products i...
CVE-2019-0915
Technical details for CVE-2019-0915 are not publicly available in the provided documents. Monitor for updates from official advisories; no concrete exploit, affected product, or remediation details are present in Connected documents.
CVE-2016-0060
Affected software: Microsoft Internet Explorer 9–11 and Microsoft Edge. The vulnerability is a memory corruption issue triggered by a crafted website, allowing remote code execution or a denial of service. This CVE is part of a family of related Internet Explorer memory corruption vulnerabilities...
CVE-2017-11791
CVE-2017-11791 is described in the provided documents as an information-disclosure vulnerability affecting the scripting engine in ChakraCore/Internet Explorer. The vulnerability arises from how objects are handled in memory and is reported for Internet Explorer and ChakraCore components on Windo...
CVE-2019-0861
Based on the connected documents, CVE-2019-0861 maps to a ChakraCore memory-corruption remote code-execution vulnerability in the Chakra scripting engine used by Microsoft Edge. The affected component is ChakraCore’s handling of objects in memory; the root cause is memory corruption. Impact is re...
CVE-2019-0989
CVE-2019-0989 is a Chakra Scripting Engine memory corruption vulnerability in Microsoft Edge (HTML-based). The issue could allow remote code execution by corrupting memory in objects handled by Chakra, enabling an attacker to run code with the current user’s rights. The CVSS v3.0 metrics indicate...
CVE-2019-0993
CVE-2019-0993 is a vulnerability in the Microsoft Edge Chakra Scripting Engine where in-memory object handling can lead to remote code execution. The connected GHSA entry confirms a remote code execution path via a web-based exploit against Edge’s Chakra engine, allowing an attacker to run code w...
CVE-2019-1003
The CVE-2019-1003 entry describes a remote code execution in the Chakra scripting engine used by Microsoft Edge (HTML-based). The root cause is a memory corruption flaw caused by how the Chakra engine handles objects in memory, enabling an attacker to run arbitrary code in the context of the curr...
CVE-2019-1366
Technical details about CVE-2019-1366 are not provided in the supplied connected documents. The documents lack affected products, root cause, impact, or remediation specifics. Monitor for updates and future disclosures.
CVE-2020-0811
CVE-2020-0811 describes a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge (HTML-based). The issue is tied to memory handling of objects within Chakra, leading to memory corruption that could be exploited to execute arbitrary code. Related entries (e.g., C...
CVE-2017-8741
CVE-2017-8741 affects Internet Explorer/Edge rendering engines in Windows platforms; the vulnerability arises from how scripting engines render objects in memory, enabling an attacker to execute arbitrary code in the context of the current user. The Nessus-derived details describe a remote-code-e...
CVE-2018-0762
CVE-2018-0762 concerns memory corruption in Microsoft scripting engines used by Internet Explorer/Edge. Connected reports focus on CVE-2018-0770 (Edge scripting engine memory corruption) as the active remote code execution vulnerability: the issue arises from how the scripting engine handles obje...
CVE-2019-0927
Technical details for CVE-2019-0927 are not publicly available in the provided documents. Monitor for updates; the connected EUVD entries do not expose concrete affected products, root cause, or remediation information within this set.
CVE-2018-0891
The vulnerability is a ChakraCore/information-disclosure issue in the scripting engine. Public details show that ChakraCore and related components in Microsoft Edge/IE could disclose memory-resident objects due to scripting engine memory handling, affecting ChakraCore-based runtimes and Edge/IE o...
CVE-2019-0925
Technical details about CVE-2019-0925 are not publicly available in the provided documents; the connected EUVD entries mention malware in 'sbrugna' but do not supply vulnerability specifics, affected products, or remediation.
CVE-2019-0937
Technical details for CVE-2019-0937 are not provided in the connected documents. Monitor for updates.
CVE-2017-0229
CVE-2017-0229 is linked to a remote code execution in Microsoft Edge via memory-corruption flaws in the scripting engine (Edge/Chakra) when handling in-memory objects. The connected advisories describe a ChakraCore/Edge RCE vulnerability with memory-corruption in the JavaScript engine, including...
CVE-2017-11837
CVE-2017-11837 affects ChakraCore/Edge scripting engine memory handling. Root cause: memory corruption when manipulating JavaScript objects in memory, enabling an attacker to execute code with the current user’s privileges. Affected products include ChakraCore and Microsoft Edge on Windows 10 (17...
CVE-2019-0771
CVE-2019-0771 is a remote code execution vulnerability described as a memory corruption flaw in the Edge scripting engine (Scripting Engine Memory Corruption Vulnerability). Connected sources corroborate related ChakraCore scripting-engine issues and point to a Microsoft advisory as the remediati...
CVE-2019-1131
CVE-2019-1131 is a remote code execution vulnerability in Microsoft Edge’s Chakra scripting engine, caused by memory handling of objects in HTML-based edge scenarios. An attacker could run arbitrary code with the current user’s privileges via a crafted web page or compromised site; exploitation r...
CVE-2019-1195
The CVE-2019-1195 entry describes a remote code-execution vulnerability in Microsoft Edge’s Chakra scripting engine, arising from memory handling of objects. Affected component: ChakraCore/Edge HTML-based runtime. Root cause: memory corruption due to object handling in Chakra, enabling arbitrary ...
CVE-2017-0071
CVE-2017-0134 is tied to a remote code execution vulnerability in Microsoft Edge’s scripting engine, arising from how in-memory objects are handled. The checkpoint advisory CPAI-2018-0053 states that a remote, unauthenticated attacker could lure a user to a crafted page to trigger memory corrupti...
CVE-2018-0945
CVE-2018-0945 is a remote code execution vulnerability in the Microsoft Edge scripting engine, arising from memory handling of objects and affecting Edge and ChakraCore. The connected advisories corroborate a ChakraCore/Edge memory-corruption issue described as a remote code execution vulnerabili...
CVE-2019-0924
Technical details for CVE-2019-0924 are not publicly provided in the supplied connected documents; no affected products, root cause, or remediation details are present. Monitor for updates.
CVE-2019-1139
CVE-2019-1139 is a remote code execution vulnerability in Microsoft Edge caused by memory handling in the Chakra scripting engine. The flaw allows an attacker to corrupt memory and execute arbitrary code in the context of the current user, potentially gaining full control if the user has admin ri...
CVE-2020-0969
CVE-2020-0969 is described in the connected documents as a remote code execution vulnerability in the Chakra Scripting Engine used by Microsoft Edge (HTML-based) / ChakraCore. The advisory notes memory corruption when handling in‑memory objects, i.e., a Chakra Scripting Engine Memory Corruption v...
CVE-2017-11846
CVE-2017-11846 affects ChakraCore and Edge/IE scripting engine in Windows 7 SP1, Windows Server 2008/2008 R2, 8.1, 10 (various builds), and Windows Server 2012/2012 R2, with memory handling in the scripting engine leading to memory corruption. The vulnerability could allow an attacker to execute ...
CVE-2017-11895
CVE-2017-11930 concerns ChakraCore/Edge up through Windows 10 and Windows Server 2016, caused by memory handling in the scripting engine that can permit code execution in the context of the current user. The related advisories describe a “Scripting Engine Memory Corruption Vulnerability” with rem...
CVE-2019-0590
Technical details for CVE-2019-0590 are not provided in the connected documents; monitor for updates.
CVE-2019-1140
CVE-2019-1140 is a remote code execution in the Chakra memory handling within Microsoft Edge (HTML-based). The vulnerability could allow arbitrary code execution with the current user’s privileges if a user views a malicious page or ad, enabling data access/modification or account creation. The i...
CVE-2016-7194
CVE-2016-7194 concerns the Chakra JavaScript engine used by Microsoft Edge. The connected advisories indicate a remote code execution / memory corruption vulnerability in ChakraCore, exploitable via a crafted web site, and note that this family includes CVE-2016-3386, CVE-2016-3389, and CVE-2016-...
CVE-2019-1024
CVE-2019-1024 corresponds to a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge (HTML-based). The issue arises from memory handling of objects in Chakra, enabling an attacker to corrupt memory and execute arbitrary code in the context of the current user. ...
CVE-2019-1197
CVE-2019-1197 concerns a remote code execution vulnerability in Microsoft Edge’s Chakra scripting engine (HTML-based) due to memory handling of objects leading to memory corruption. The affected component is the Chakra engine used in Edge; exploitation could allow code execution with the attacker...
CVE-2019-1357
Technical details are not publicly available in the provided documents. No information on affected products, versions, root cause, or remediation is provided. Action: monitor for updates.
CVE-2024-38156
CVE-2024-38156 affects Microsoft Edge (Chromium-based). The connected sources describe a UI spoofing (SUI) vulnerability in Edge where the web page structure protection is insufficient, enabling a deceptive user interface. Root cause: inadequate protection of page structure allows spoofing of UI ...
CVE-2017-0032
CVE-2017-0032 describes a remote code execution vulnerability in how Microsoft scripting engines render in-memory objects in Microsoft browsers. The issue allows an attacker to corrupt memory and execute arbitrary code with the current user’s privileges; if the user has administrative rights, the...
CVE-2017-11912
CVE-2017-11912 is a ChakraCore scripting engine memory corruption vulnerability affecting ChakraCore, IE/Edge on Windows platforms listed in the Initial document. Connected sources describe remote code execution risk due to memory object handling, enabling an attacker to run code in the context o...
CVE-2018-0840
Technical details specific to CVE-2018-0840 are not provided in the connected documents. The GHSA advisories describe ChakraCore memory corruption vulnerabilities in general, but do not disclose affected products/versions or impacts for this CVE. Monitor for updates.
CVE-2018-8467
CVE-2018-8467 is a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge and ChakraCore, caused by memory handling of objects. The issue enables code execution via crafted objects in memory and is associated with exploitation in the wild (Exploit-DB entries htt...
CVE-2019-0612
CVE-2019-0612 is a security feature bypass in Microsoft Edge where Click2Play protection improperly handles Flash objects. The bypass does not by itself enable arbitrary code execution, but can undermine the protection mechanism. Affected product: Microsoft Edge on Windows; vulnerable component: ...
CVE-2020-17058
CVE-2020-17058 is described as a Microsoft Browser Memory Corruption Vulnerability. The available details show a memory corruption flaw in the Microsoft Browser, with impact on confidentiality, integrity, and availability rated HIGH (CVSS v3.1: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). The vulnerabil...
CVE-2016-7195
CVE-2016-7195 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, exposing memory corruption via a crafted webpage that can lead to remote code execution or memory DO S. This entry is closely tied to CVE-2016-7198 (a different vulnerability with the same attack surface) and is corroborat...
CVE-2017-0141
Technical details for CVE-2017-0141 are not provided in the supplied documents. Public information on affected products, vulnerable components, impact, and remediation cannot be confirmed from these sources; monitor for updates.
CVE-2017-11873
Technical details for CVE-2017-11873 are not publicly provided in the supplied documents; related advisories discuss ChakraCore memory corruption broadly. Monitor for updates from Microsoft/Edge security advisories for affected versions and fixes.