759 matches found
CVE-2019-1139
CVE-2019-1139 is a remote code execution vulnerability in Microsoft Edge caused by memory handling in the Chakra scripting engine. The flaw allows an attacker to corrupt memory and execute arbitrary code in the context of the current user, potentially gaining full control if the user has admin ri...
CVE-2019-1298
Technical details for CVE-2019-1298 are not publicly available in the provided documents. Monitor for updates from the sources in this dataset.
CVE-2016-3267
CVE-2016-3267 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, enabling remote attackers to determine the existence of unspecified files via a crafted web site (information disclosure). Exploitation details are not provided beyond this remote-disclosure behavior. The vulnerability is ...
CVE-2018-8383
Technical details about CVE-2018-8383 are not provided in the supplied documents. The connected records reference related CVEs but do not reveal affected products, versions, impact, or fixes for this CVE. Monitor for updates from official sources.
CVE-2019-0991
CVE-2019-0991 is a remote code execution vulnerability in Microsoft Edge’s Chakra scripting engine, caused by memory corruption when handling objects in memory. Exploitation could allow an attacker to execute arbitrary code with the current user’s privileges, potentially taking full control if th...
CVE-2019-0993
CVE-2019-0993 is a vulnerability in the Microsoft Edge Chakra Scripting Engine where in-memory object handling can lead to remote code execution. The connected GHSA entry confirms a remote code execution path via a web-based exploit against Edge’s Chakra engine, allowing an attacker to run code w...
CVE-2019-1197
CVE-2019-1197 concerns a remote code execution vulnerability in Microsoft Edge’s Chakra scripting engine (HTML-based) due to memory handling of objects leading to memory corruption. The affected component is the Chakra engine used in Edge; exploitation could allow code execution with the attacker...
CVE-2019-1300
CVE-2019-1300 describes a remote code execution in the Chakra scripting engine used by Microsoft Edge, caused by memory handling in objects in memory. The vulnerability is categorized as HIGH severity (CVSS v3.1 base score 7.5) with network attack vector, high attack complexity, no privileges req...
CVE-2017-8634
CVE-2017-8634 affects Microsoft Edge on Windows 10 1703. It is a memory corruption flaw in the browser’s JavaScript engine when rendering objects in memory, allowing arbitrary code execution in the context of the current user. Public exploit reference exists (Exploit-DB: 42474). The provided Ness...
CVE-2019-0609
CVE-2019-0609 describes a remote-code-execution vulnerability in the way a Microsoft scripting engine handles in-memory objects, impacting Microsoft browsers. Root cause is memory-handling weakness in the scripting engine, with network access required and user interaction needed. The CVSS metrics...
CVE-2019-0861
Based on the connected documents, CVE-2019-0861 maps to a ChakraCore memory-corruption remote code-execution vulnerability in the Chakra scripting engine used by Microsoft Edge. The affected component is ChakraCore’s handling of objects in memory; the root cause is memory corruption. Impact is re...
CVE-2019-1307
CVE-2019-1307 is a remote code execution flaw in Microsoft Edge’s Chakra scripting engine caused by memory handling of objects, enabling memory corruption. The issue is corroborated by multiple advisories (GHSA entries) describing an out-of-bounds/write-based Chakra memory corruption with remote ...
CVE-2017-11894
CVE-2017-11894 affects ChakraCore and certain Windows components (including Internet Explorer and Edge on Windows 7/8.1/Server 2008/2012 and Windows 10 releases) due to how the scripting engine handles in-memory objects. The vulnerability allows an attacker to gain the same user rights as the cur...
CVE-2019-0568
CVE-2019-0568 describes a remote code execution vulnerability in the Chakra scripting engine with memory handling weaknesses in Microsoft Edge/ChakraCore. The root cause is a memory object handling issue in Chakra leading to code execution in the context of the logged-in user. Affected products i...
CVE-2024-38156
CVE-2024-38156 affects Microsoft Edge (Chromium-based). The connected sources describe a UI spoofing (SUI) vulnerability in Edge where the web page structure protection is insufficient, enabling a deceptive user interface. Root cause: inadequate protection of page structure allows spoofing of UI ...
CVE-2017-8741
CVE-2017-8741 affects Internet Explorer/Edge rendering engines in Windows platforms; the vulnerability arises from how scripting engines render objects in memory, enabling an attacker to execute arbitrary code in the context of the current user. The Nessus-derived details describe a remote-code-e...
CVE-2019-0937
Technical details for CVE-2019-0937 are not provided in the connected documents. Monitor for updates.
CVE-2019-1003
The CVE-2019-1003 entry describes a remote code execution in the Chakra scripting engine used by Microsoft Edge (HTML-based). The root cause is a memory corruption flaw caused by how the Chakra engine handles objects in memory, enabling an attacker to run arbitrary code in the context of the curr...
CVE-2019-1104
Technical details about CVE-2019-1104 are not provided in the supplied documents. No information on affected products, root cause, impact, or mitigations is available here. Monitor for official disclosures from Microsoft/NVD for updates.
CVE-2020-0811
CVE-2020-0811 describes a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge (HTML-based). The issue is tied to memory handling of objects within Chakra, leading to memory corruption that could be exploited to execute arbitrary code. Related entries (e.g., C...
CVE-2016-0060
Affected software: Microsoft Internet Explorer 9–11 and Microsoft Edge. The vulnerability is a memory corruption issue triggered by a crafted website, allowing remote code execution or a denial of service. This CVE is part of a family of related Internet Explorer memory corruption vulnerabilities...
CVE-2017-11791
CVE-2017-11791 is described in the provided documents as an information-disclosure vulnerability affecting the scripting engine in ChakraCore/Internet Explorer. The vulnerability arises from how objects are handled in memory and is reported for Internet Explorer and ChakraCore components on Windo...
CVE-2018-0945
CVE-2018-0945 is a remote code execution vulnerability in the Microsoft Edge scripting engine, arising from memory handling of objects and affecting Edge and ChakraCore. The connected advisories corroborate a ChakraCore/Edge memory-corruption issue described as a remote code execution vulnerabili...
CVE-2019-0771
CVE-2019-0771 is a remote code execution vulnerability described as a memory corruption flaw in the Edge scripting engine (Scripting Engine Memory Corruption Vulnerability). Connected sources corroborate related ChakraCore scripting-engine issues and point to a Microsoft advisory as the remediati...
CVE-2019-0913
Technical details for CVE-2019-0913 are not publicly available in the provided documents; monitor for updates.
CVE-2019-0915
Technical details for CVE-2019-0915 are not publicly available in the provided documents. Monitor for updates from official advisories; no concrete exploit, affected product, or remediation details are present in Connected documents.
CVE-2019-0989
CVE-2019-0989 is a Chakra Scripting Engine memory corruption vulnerability in Microsoft Edge (HTML-based). The issue could allow remote code execution by corrupting memory in objects handled by Chakra, enabling an attacker to run code with the current user’s rights. The CVSS v3.0 metrics indicate...
CVE-2019-1195
The CVE-2019-1195 entry describes a remote code-execution vulnerability in Microsoft Edge’s Chakra scripting engine, arising from memory handling of objects. Affected component: ChakraCore/Edge HTML-based runtime. Root cause: memory corruption due to object handling in Chakra, enabling arbitrary ...
CVE-2019-1366
Technical details about CVE-2019-1366 are not provided in the supplied connected documents. The documents lack affected products, root cause, impact, or remediation specifics. Monitor for updates and future disclosures.
CVE-2020-1568
Technical details about CVE-2020-1568 are not publicly provided in the connected documents. The sources reference the Edge PDF Reader RCE but do not supply affected versions, root cause analysis, exploit specifics, or fixes beyond a general description. Monitor for updates.
CVE-2018-0835
Mode C: The connected advisories describe a ChakraCore/Edge remote code execution vulnerability caused by the scripting engine’s handling of in-memory objects (Scripting Engine Memory Corruption Vulnerability). Affected software includes Microsoft Edge and ChakraCore on Windows 10 releases such a...
CVE-2018-0891
The vulnerability is a ChakraCore/information-disclosure issue in the scripting engine. Public details show that ChakraCore and related components in Microsoft Edge/IE could disclose memory-resident objects due to scripting engine memory handling, affecting ChakraCore-based runtimes and Edge/IE o...
CVE-2019-0927
Technical details for CVE-2019-0927 are not publicly available in the provided documents. Monitor for updates; the connected EUVD entries do not expose concrete affected products, root cause, or remediation information within this set.
CVE-2017-0071
CVE-2017-0134 is tied to a remote code execution vulnerability in Microsoft Edge’s scripting engine, arising from how in-memory objects are handled. The checkpoint advisory CPAI-2018-0053 states that a remote, unauthenticated attacker could lure a user to a crafted page to trigger memory corrupti...
CVE-2018-0762
CVE-2018-0762 concerns memory corruption in Microsoft scripting engines used by Internet Explorer/Edge. Connected reports focus on CVE-2018-0770 (Edge scripting engine memory corruption) as the active remote code execution vulnerability: the issue arises from how the scripting engine handles obje...
CVE-2017-11909
Technical details for CVE-2017-11930 are not publicly available in the supplied documents. Monitor for updates.
CVE-2019-0746
The Linked documents confirm CVE-2019-0746 is an information-disclosure vulnerability in the scripting engine of Microsoft Edge (ChakraCore). The issue arises when the engine mishandles in-memory objects, enabling unauthorized access to sensitive information. Descriptions consistently reference h...
CVE-2019-0925
Technical details about CVE-2019-0925 are not publicly available in the provided documents; the connected EUVD entries mention malware in 'sbrugna' but do not supply vulnerability specifics, affected products, or remediation.
CVE-2017-0229
CVE-2017-0229 is linked to a remote code execution in Microsoft Edge via memory-corruption flaws in the scripting engine (Edge/Chakra) when handling in-memory objects. The connected advisories describe a ChakraCore/Edge RCE vulnerability with memory-corruption in the JavaScript engine, including...
CVE-2017-0235
CVE-2017-0235 corresponds to a remote code execution vulnerability in Microsoft Edge tied to Chakra's memory handling when rendering objects. The connected advisories describe a memory corruption issue in the Chakra JavaScript engine that could be triggered to execute arbitrary code, affecting Ed...
CVE-2018-0860
CVE-2018-0860 involves Microsoft Edge and ChakraCore on Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016. The root cause is a memory handling issue in the ChakraCore scripting engine that can lead to remote code execution when objects in memory are mishandled. The CVE is tied to ...
CVE-2019-1024
CVE-2019-1024 corresponds to a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge (HTML-based). The issue arises from memory handling of objects in Chakra, enabling an attacker to corrupt memory and execute arbitrary code in the context of the current user. ...
CVE-2019-1131
CVE-2019-1131 is a remote code execution vulnerability in Microsoft Edge’s Chakra scripting engine, caused by memory handling of objects in HTML-based edge scenarios. An attacker could run arbitrary code with the current user’s privileges via a crafted web page or compromised site; exploitation r...
CVE-2019-1196
The CVE-2019-1196 issue is a remote code execution vulnerability in Microsoft Edge’s Chakra scripting engine due to memory handling of objects. The impact is execution of arbitrary code in the current user context with potential full system control if the user has admin rights. The conditionally ...
CVE-2017-0032
CVE-2017-0032 describes a remote code execution vulnerability in how Microsoft scripting engines render in-memory objects in Microsoft browsers. The issue allows an attacker to corrupt memory and execute arbitrary code with the current user’s privileges; if the user has administrative rights, the...
CVE-2018-0769
CVE-2018-0770 affects the Microsoft Edge scripting engine on Windows 10 (various builds) and Windows Server 2016, due to memory handling of in-memory objects in the scripting engine, leading to remote code execution in the context of the current user. A remote, unauthenticated attacker could enti...
CVE-2018-0995
CVE-2018-0995 is a ChakraCore/Edge remote code execution vulnerability described as Memory Corruption in the Chakra scripting engine’s handling of in-memory objects. The connected GitHub advisories reiterate: a remote code execution flaw affecting Microsoft Edge and ChakraCore, with CVE-2018-0995...
CVE-2019-0590
Technical details for CVE-2019-0590 are not provided in the connected documents; monitor for updates.
CVE-2019-0924
Technical details for CVE-2019-0924 are not publicly provided in the supplied connected documents; no affected products, root cause, or remediation details are present. Monitor for updates.
CVE-2019-1140
CVE-2019-1140 is a remote code execution in the Chakra memory handling within Microsoft Edge (HTML-based). The vulnerability could allow arbitrary code execution with the current user’s privileges if a user views a malicious page or ad, enabling data access/modification or account creation. The i...