Lucene search
+L
MicrosoftEdge

758 matches found

CVE
CVE
added 2019/06/12 1:49 p.m.132 views

CVE-2019-0991

CVE-2019-0991 is a remote code execution vulnerability in Microsoft Edge’s Chakra scripting engine, caused by memory corruption when handling objects in memory. Exploitation could allow an attacker to execute arbitrary code with the current user’s privileges, potentially taking full control if th...

7.6CVSS6.6AI score0.02234EPSS
Save
CVE
CVE
added 2019/09/11 9:25 p.m.132 views

CVE-2019-1298

Technical details for CVE-2019-1298 are not publicly available in the provided documents. Monitor for updates from the sources in this dataset.

7.6CVSS7.4AI score0.08673EPSS
Save
CVE
CVE
added 2018/08/15 5:00 p.m.131 views

CVE-2018-8383

Technical details about CVE-2018-8383 are not provided in the supplied documents. The connected records reference related CVEs but do not reveal affected products, versions, impact, or fixes for this CVE. Monitor for updates from official sources.

4.3CVSS5.6AI score0.09504EPSS
Save
CVE
CVE
added 2019/01/08 9:00 p.m.131 views

CVE-2019-0568

CVE-2019-0568 describes a remote code execution vulnerability in the Chakra scripting engine with memory handling weaknesses in Microsoft Edge/ChakraCore. The root cause is a memory object handling issue in Chakra leading to code execution in the context of the logged-in user. Affected products i...

7.6CVSS7.4AI score0.64656EPSS
Save
CVE
CVE
added 2019/05/16 6:17 p.m.131 views

CVE-2019-0915

Technical details for CVE-2019-0915 are not publicly available in the provided documents. Monitor for updates from official advisories; no concrete exploit, affected product, or remediation details are present in Connected documents.

7.6CVSS7.5AI score0.09679EPSS
Save
CVE
CVE
added 2019/06/12 1:49 p.m.131 views

CVE-2019-0989

CVE-2019-0989 is a Chakra Scripting Engine memory corruption vulnerability in Microsoft Edge (HTML-based). The issue could allow remote code execution by corrupting memory in objects handled by Chakra, enabling an attacker to run code with the current user’s rights. The CVSS v3.0 metrics indicate...

7.6CVSS6.6AI score0.0217EPSS
Save
CVE
CVE
added 2019/07/29 2:06 p.m.131 views

CVE-2019-1104

Technical details about CVE-2019-1104 are not provided in the supplied documents. No information on affected products, root cause, impact, or mitigations is available here. Monitor for official disclosures from Microsoft/NVD for updates.

7.6CVSS7.7AI score0.07328EPSS
Save
CVE
CVE
added 2016/02/10 11:00 a.m.130 views

CVE-2016-0060

Affected software: Microsoft Internet Explorer 9–11 and Microsoft Edge. The vulnerability is a memory corruption issue triggered by a crafted website, allowing remote code execution or a denial of service. This CVE is part of a family of related Internet Explorer memory corruption vulnerabilities...

9.3CVSS8.6AI score0.24701EPSS
Save
CVE
CVE
added 2019/05/16 6:17 p.m.130 views

CVE-2019-0913

Technical details for CVE-2019-0913 are not publicly available in the provided documents; monitor for updates.

7.6CVSS7.5AI score0.09679EPSS
Save
CVE
CVE
added 2020/08/17 7:13 p.m.130 views

CVE-2020-1568

Technical details about CVE-2020-1568 are not publicly provided in the connected documents. The sources reference the Edge PDF Reader RCE but do not supply affected versions, root cause analysis, exploit specifics, or fixes beyond a general description. Monitor for updates.

7.6CVSS8.8AI score0.0311EPSS
Save
CVE
CVE
added 2019/04/09 8:19 p.m.129 views

CVE-2019-0861

Based on the connected documents, CVE-2019-0861 maps to a ChakraCore memory-corruption remote code-execution vulnerability in the Chakra scripting engine used by Microsoft Edge. The affected component is ChakraCore’s handling of objects in memory; the root cause is memory corruption. Impact is re...

7.6CVSS7.5AI score0.11298EPSS
Save
CVE
CVE
added 2019/06/12 1:49 p.m.129 views

CVE-2019-0993

CVE-2019-0993 is a vulnerability in the Microsoft Edge Chakra Scripting Engine where in-memory object handling can lead to remote code execution. The connected GHSA entry confirms a remote code execution path via a web-based exploit against Edge’s Chakra engine, allowing an attacker to run code w...

7.6CVSS6.6AI score0.02234EPSS
Save
CVE
CVE
added 2019/06/12 1:49 p.m.129 views

CVE-2019-1003

The CVE-2019-1003 entry describes a remote code execution in the Chakra scripting engine used by Microsoft Edge (HTML-based). The root cause is a memory corruption flaw caused by how the Chakra engine handles objects in memory, enabling an attacker to run arbitrary code in the context of the curr...

7.6CVSS6.7AI score0.0217EPSS
Save
CVE
CVE
added 2017/11/15 3:00 a.m.128 views

CVE-2017-11791

CVE-2017-11791 is described in the provided documents as an information-disclosure vulnerability affecting the scripting engine in ChakraCore/Internet Explorer. The vulnerability arises from how objects are handled in memory and is reported for Internet Explorer and ChakraCore components on Windo...

3.1CVSS4.7AI score0.06731EPSS
Save
CVE
CVE
added 2018/01/04 2:00 p.m.128 views

CVE-2018-0762

CVE-2018-0762 concerns memory corruption in Microsoft scripting engines used by Internet Explorer/Edge. Connected reports focus on CVE-2018-0770 (Edge scripting engine memory corruption) as the active remote code execution vulnerability: the issue arises from how the scripting engine handles obje...

7.6CVSS6.7AI score0.12269EPSS
Save
CVE
CVE
added 2018/03/14 5:00 p.m.128 views

CVE-2018-0891

The vulnerability is a ChakraCore/information-disclosure issue in the scripting engine. Public details show that ChakraCore and related components in Microsoft Edge/IE could disclose memory-resident objects due to scripting engine memory handling, affecting ChakraCore-based runtimes and Edge/IE o...

4.3CVSS5.1AI score0.14944EPSS
Save
CVE
CVE
added 2019/05/16 6:17 p.m.128 views

CVE-2019-0927

Technical details for CVE-2019-0927 are not publicly available in the provided documents. Monitor for updates; the connected EUVD entries do not expose concrete affected products, root cause, or remediation information within this set.

7.6CVSS7.5AI score0.09679EPSS
Save
CVE
CVE
added 2019/10/10 1:28 p.m.128 views

CVE-2019-1366

Technical details about CVE-2019-1366 are not provided in the supplied connected documents. The documents lack affected products, root cause, impact, or remediation specifics. Monitor for updates and future disclosures.

7.6CVSS7.4AI score0.1017EPSS
Save
CVE
CVE
added 2017/09/13 1:00 a.m.127 views

CVE-2017-8741

CVE-2017-8741 affects Internet Explorer/Edge rendering engines in Windows platforms; the vulnerability arises from how scripting engines render objects in memory, enabling an attacker to execute arbitrary code in the context of the current user. The Nessus-derived details describe a remote-code-e...

7.6CVSS7.2AI score0.12259EPSS
Save
CVE
CVE
added 2019/04/09 2:19 a.m.127 views

CVE-2019-0771

CVE-2019-0771 is a remote code execution vulnerability described as a memory corruption flaw in the Edge scripting engine (Scripting Engine Memory Corruption Vulnerability). Connected sources corroborate related ChakraCore scripting-engine issues and point to a Microsoft advisory as the remediati...

7.6CVSS7.6AI score0.11088EPSS
Save
CVE
CVE
added 2019/05/16 6:17 p.m.127 views

CVE-2019-0925

Technical details about CVE-2019-0925 are not publicly available in the provided documents; the connected EUVD entries mention malware in 'sbrugna' but do not supply vulnerability specifics, affected products, or remediation.

7.6CVSS7.5AI score0.09679EPSS
Save
CVE
CVE
added 2019/05/16 6:17 p.m.127 views

CVE-2019-0937

Technical details for CVE-2019-0937 are not provided in the connected documents. Monitor for updates.

7.6CVSS7.5AI score0.09679EPSS
Save
CVE
CVE
added 2020/03/12 3:48 p.m.127 views

CVE-2020-0811

CVE-2020-0811 describes a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge (HTML-based). The issue is tied to memory handling of objects within Chakra, leading to memory corruption that could be exploited to execute arbitrary code. Related entries (e.g., C...

7.6CVSS7.4AI score0.07713EPSS
Save
CVE
CVE
added 2019/05/16 6:17 p.m.126 views

CVE-2019-0924

Technical details for CVE-2019-0924 are not publicly provided in the supplied connected documents; no affected products, root cause, or remediation details are present. Monitor for updates.

7.6CVSS7.5AI score0.09679EPSS
Save
CVE
CVE
added 2019/08/14 8:55 p.m.126 views

CVE-2019-1195

The CVE-2019-1195 entry describes a remote code-execution vulnerability in Microsoft Edge’s Chakra scripting engine, arising from memory handling of objects. Affected component: ChakraCore/Edge HTML-based runtime. Root cause: memory corruption due to object handling in Chakra, enabling arbitrary ...

7.6CVSS7.5AI score0.01883EPSS
Save
CVE
CVE
added 2017/05/12 2:00 p.m.125 views

CVE-2017-0229

CVE-2017-0229 is linked to a remote code execution in Microsoft Edge via memory-corrup­tion flaws in the scripting engine (Edge/Chakra) when handling in-memory objects. The connected advisories describe a ChakraCore/Edge RCE vulnerability with memory-corruption in the JavaScript engine, including...

7.6CVSS7.7AI score0.10749EPSS
Save
CVE
CVE
added 2018/05/09 7:00 p.m.125 views

CVE-2018-0945

CVE-2018-0945 is a remote code execution vulnerability in the Microsoft Edge scripting engine, arising from memory handling of objects and affecting Edge and ChakraCore. The connected advisories corroborate a ChakraCore/Edge memory-corruption issue described as a remote code execution vulnerabili...

7.6CVSS7.7AI score0.1601EPSS
Save
CVE
CVE
added 2019/08/14 8:55 p.m.125 views

CVE-2019-1197

CVE-2019-1197 concerns a remote code execution vulnerability in Microsoft Edge’s Chakra scripting engine (HTML-based) due to memory handling of objects leading to memory corruption. The affected component is the Chakra engine used in Edge; exploitation could allow code execution with the attacker...

7.6CVSS7.5AI score0.01934EPSS
Save
CVE
CVE
added 2017/03/17 12:00 a.m.124 views

CVE-2017-0071

CVE-2017-0134 is tied to a remote code execution vulnerability in Microsoft Edge’s scripting engine, arising from how in-memory objects are handled. The checkpoint advisory CPAI-2018-0053 states that a remote, unauthenticated attacker could lure a user to a crafted page to trigger memory corrupti...

7.6CVSS7.9AI score0.30413EPSS
Save
CVE
CVE
added 2017/11/15 3:00 a.m.124 views

CVE-2017-11837

CVE-2017-11837 affects ChakraCore/Edge scripting engine memory handling. Root cause: memory corruption when manipulating JavaScript objects in memory, enabling an attacker to execute code with the current user’s privileges. Affected products include ChakraCore and Microsoft Edge on Windows 10 (17...

7.6CVSS7.5AI score0.08726EPSS
Save
CVE
CVE
added 2017/12/12 9:00 p.m.124 views

CVE-2017-11895

CVE-2017-11930 concerns ChakraCore/Edge up through Windows 10 and Windows Server 2016, caused by memory handling in the scripting engine that can permit code execution in the context of the current user. The related advisories describe a “Scripting Engine Memory Corruption Vulnerability” with rem...

7.6CVSS7.6AI score0.08653EPSS
Save
CVE
CVE
added 2019/03/06 12:00 a.m.124 views

CVE-2019-0590

Technical details for CVE-2019-0590 are not provided in the connected documents; monitor for updates.

7.6CVSS7.7AI score0.11298EPSS
Save
CVE
CVE
added 2019/08/14 8:55 p.m.124 views

CVE-2019-1131

CVE-2019-1131 is a remote code execution vulnerability in Microsoft Edge’s Chakra scripting engine, caused by memory handling of objects in HTML-based edge scenarios. An attacker could run arbitrary code with the current user’s privileges via a crafted web page or compromised site; exploitation r...

7.6CVSS7.5AI score0.01883EPSS
Save
CVE
CVE
added 2018/02/15 2:00 a.m.123 views

CVE-2018-0840

Technical details specific to CVE-2018-0840 are not provided in the connected documents. The GHSA advisories describe ChakraCore memory corruption vulnerabilities in general, but do not disclose affected products/versions or impacts for this CVE. Monitor for updates.

9.3CVSS7.3AI score0.48167EPSS
Save
CVE
CVE
added 2018/09/13 12:00 a.m.123 views

CVE-2018-8467

CVE-2018-8467 is a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge and ChakraCore, caused by memory handling of objects. The issue enables code execution via crafted objects in memory and is associated with exploitation in the wild (Exploit-DB entries htt...

7.6CVSS7.4AI score0.63716EPSS
Save
CVE
CVE
added 2019/08/14 8:55 p.m.123 views

CVE-2019-1139

CVE-2019-1139 is a remote code execution vulnerability in Microsoft Edge caused by memory handling in the Chakra scripting engine. The flaw allows an attacker to corrupt memory and execute arbitrary code in the context of the current user, potentially gaining full control if the user has admin ri...

7.6CVSS7.5AI score0.01934EPSS
Save
CVE
CVE
added 2019/10/10 1:28 p.m.123 views

CVE-2019-1357

Technical details are not publicly available in the provided documents. No information on affected products, versions, root cause, or remediation is provided. Action: monitor for updates.

4.3CVSS6.3AI score0.02287EPSS
Save
CVE
CVE
added 2020/04/15 3:13 p.m.123 views

CVE-2020-0969

CVE-2020-0969 is described in the connected documents as a remote code execution vulnerability in the Chakra Scripting Engine used by Microsoft Edge (HTML-based) / ChakraCore. The advisory notes memory corruption when handling in‑memory objects, i.e., a Chakra Scripting Engine Memory Corruption v...

7.6CVSS7.8AI score0.13303EPSS
Save
CVE
CVE
added 2016/10/14 1:00 a.m.122 views

CVE-2016-7194

CVE-2016-7194 concerns the Chakra JavaScript engine used by Microsoft Edge. The connected advisories indicate a remote code execution / memory corruption vulnerability in ChakraCore, exploitable via a crafted web site, and note that this family includes CVE-2016-3386, CVE-2016-3389, and CVE-2016-...

7.6CVSS7.6AI score0.52637EPSS
Save
CVE
CVE
added 2017/05/12 2:00 p.m.122 views

CVE-2017-0235

CVE-2017-0235 corresponds to a remote code execution vulnerability in Microsoft Edge tied to Chakra's memory handling when rendering objects. The connected advisories describe a memory corruption issue in the Chakra JavaScript engine that could be triggered to execute arbitrary code, affecting Ed...

7.6CVSS7.7AI score0.11109EPSS
Save
CVE
CVE
added 2017/11/15 3:00 a.m.122 views

CVE-2017-11846

CVE-2017-11846 affects ChakraCore and Edge/IE scripting engine in Windows 7 SP1, Windows Server 2008/2008 R2, 8.1, 10 (various builds), and Windows Server 2012/2012 R2, with memory handling in the scripting engine leading to memory corruption. The vulnerability could allow an attacker to execute ...

7.5CVSS7.5AI score0.08966EPSS
Save
CVE
CVE
added 2017/11/15 3:00 a.m.122 views

CVE-2017-11873

Technical details for CVE-2017-11873 are not publicly provided in the supplied documents; related advisories discuss ChakraCore memory corruption broadly. Monitor for updates from Microsoft/Edge security advisories for affected versions and fixes.

7.6CVSS7.4AI score0.55893EPSS
Save
CVE
CVE
added 2017/12/12 9:00 p.m.122 views

CVE-2017-11912

CVE-2017-11912 is a ChakraCore scripting engine memory corruption vulnerability affecting ChakraCore, IE/Edge on Windows platforms listed in the Initial document. Connected sources describe remote code execution risk due to memory object handling, enabling an attacker to run code in the context o...

7.6CVSS7.6AI score0.08653EPSS
Save
CVE
CVE
added 2019/06/12 1:49 p.m.122 views

CVE-2019-1024

CVE-2019-1024 corresponds to a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge (HTML-based). The issue arises from memory handling of objects in Chakra, enabling an attacker to corrupt memory and execute arbitrary code in the context of the current user. ...

7.6CVSS6.6AI score0.0217EPSS
Save
CVE
CVE
added 2019/08/14 8:55 p.m.122 views

CVE-2019-1140

CVE-2019-1140 is a remote code execution in the Chakra memory handling within Microsoft Edge (HTML-based). The vulnerability could allow arbitrary code execution with the current user’s privileges if a user views a malicious page or ad, enabling data access/modification or account creation. The i...

8.8CVSS8.5AI score0.03824EPSS
Save
CVE
CVE
added 2021/09/02 10:25 p.m.122 views

CVE-2021-26436

Technical details about CVE-2021-26436 (affected component, root cause, exploitability, impact, and fixed version) are not provided in the connected documents. Monitor official advisories (e.g., Microsoft/MSRC) for updates and patches.

8.1CVSS6.7AI score0.02746EPSS
Save
CVE
CVE
added 2016/11/10 6:16 a.m.121 views

CVE-2016-7195

CVE-2016-7195 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, exposing memory corruption via a crafted webpage that can lead to remote code execution or memory DO S. This entry is closely tied to CVE-2016-7198 (a different vulnerability with the same attack surface) and is corroborat...

7.6CVSS7.8AI score0.16927EPSS
Save
CVE
CVE
added 2017/03/17 12:00 a.m.121 views

CVE-2017-0141

Technical details for CVE-2017-0141 are not provided in the supplied documents. Public information on affected products, vulnerable components, impact, and remediation cannot be confirmed from these sources; monitor for updates.

7.6CVSS7.9AI score0.44338EPSS
Save
CVE
CVE
added 2018/01/04 2:00 p.m.121 views

CVE-2018-0758

CVE-2018-0758 affects Microsoft Edge’s Scripting Engine memory handling on Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016. The vulnerability enables remote code execution in the context of the current user due to how objects are managed in memory. Connected documents corroborat...

7.6CVSS6.8AI score0.73088EPSS
Save
CVE
CVE
added 2018/09/13 12:00 a.m.121 views

CVE-2018-8466

CVE-2018-8466 details a remote code execution in the Chakra scripting engine used by Microsoft Edge and ChakraCore, caused by memory object handling vulnerabilities. The initial entry notes a memory corruption/RC vulnerability, with Edge/ChakraCore as affected. Connected sources corroborate Chakr...

7.6CVSS7.4AI score0.63716EPSS
Save
Total number of security vulnerabilities758