CVE-2017-0141

Technical details for CVE-2017-0141 are not provided in the supplied documents. Public information on affected products, vulnerable components, impact, and remediation cannot be confirmed from these sources; monitor for updates.

CVE-2017-0235

CVE-2017-0235 corresponds to a remote code execution vulnerability in Microsoft Edge tied to Chakra's memory handling when rendering objects. The connected advisories describe a memory corruption issue in the Chakra JavaScript engine that could be triggered to execute arbitrary code, affecting Ed...

CVE-2017-8518

CVE-2017-8518 — Microsoft Edge Memory Corruption Vulnerability . A remote code execution flaw exists when Edge improperly accesses objects in memory in the scripting engine, allowing arbitrary code execution in the context of the current user. Root cause: memory handling error in the scripting en...

CVE-2018-0840

Technical details specific to CVE-2018-0840 are not provided in the connected documents. The GHSA advisories describe ChakraCore memory corruption vulnerabilities in general, but do not disclose affected products/versions or impacts for this CVE. Monitor for updates.

CVE-2019-0770

CVE-2019-0770 is a remote code execution vulnerability in the Microsoft Edge scripting engine due to memory handling of objects. Connected advisories describe similar memory‑corruption issues in Microsoft.ChakraCore scripting engines, confirming the vulnerability class but do not provide concrete...

CVE-2019-0922

Technical details about CVE-2019-0922 are not publicly available in the provided documents. Monitor for updates from official advisories to determine affected products, impact, and remediation.

CVE-2019-1197

CVE-2019-1197 concerns a remote code execution vulnerability in Microsoft Edge’s Chakra scripting engine (HTML-based) due to memory handling of objects leading to memory corruption. The affected component is the Chakra engine used in Edge; exploitation could allow code execution with the attacker...

CVE-2017-11873

Technical details for CVE-2017-11873 are not publicly provided in the supplied documents; related advisories discuss ChakraCore memory corruption broadly. Monitor for updates from Microsoft/Edge security advisories for affected versions and fixes.

CVE-2017-8645

CVE-2017-8645 is a remote-code-execution memory-corruption vulnerability in Microsoft Edge’s scripting engine (JavaScript/Chakra). Affected: Windows 10 versions 1511–1703 and Windows Server 2016, via Edge rendering objects in memory. Root cause: memory corruption during rendering of objects in th...

CVE-2019-0764

Technical details for CVE-2019-0764 are not publicly available in the provided documents. The materials reference general browser tampering and unrelated Windows KB updates; monitor for future updates for affected products, components, and remediation.

CVE-2019-0769

CVE-2019-0769 is a remote code-execution vulnerability in Microsoft Edge’s scripting engine that can be triggered by memory handling in objects. The entry references a Microsoft advisory (MSRC CVE-2019-0769). The CVSS suggests high impact across confidentiality, integrity, and availability with n...

CVE-2019-0923

Technical details for CVE-2019-0923 are not publicly available in the provided documents; monitor for updates.

CVE-2020-0813

CVE-2020-0813 (ChakraCore) is a memory-information-disclosure vulnerability in the Chakra scripting engine. The issue arises when Chakra improperly discloses the contents of memory, enabling an attacker to access memory data from objects whose creation address is known. The vulnerability is addre...

CVE-2020-1220

CVE-2020-1220: Edge (Chromium-based) in IE Mode spoofing vulnerability due to improper handling of specific redirects. Affects Microsoft Edge in IE Mode; vulnerability allows spoofing of the displayed site. Connected CNVD entry reiterates Edge spoofing context; no vendor-provided fix details in t...

CVE-2020-1462

CVE-2020-1462 is described as an information-disclosure vulnerability that occurs when Skype for Business is accessed through Microsoft Edge (EdgeHTML-based). The available initial description states the affected component as Skype for Business via EdgeHTML-based Edge, with the impact limited to ...

CVE-2015-2494

Affected software: Microsoft Internet Explorer 7–11 and Microsoft Edge. Vulnerability: memory corruption leading to remote code execution or denial of service via a crafted web site. Root cause / details: memory corruption vulnerability in the browser rendering/handling of web content (as describ...

CVE-2016-7189

CVE-2016-7189 affects the Chakra JavaScript engine in Microsoft Edge. The connected sources describe a remote code execution vulnerability triggered by visiting a crafted web page, stemming from improper handling of objects in memory. The impact is high (RCE), with attack vector over the network ...

CVE-2017-0134

CVE-2017-0134 is described as a remote code execution vulnerability in Microsoft's scripting engines for Edge/Internet Explorer, caused by memory handling when rendering objects in memory. The exploit path involves a remote, unauthenticated attacker enticing the user to open a specially crafted p...

CVE-2017-11840

CVE-2017-11840 αφορά ChakraCore/Microsoft Edge en Windows 10 (Gold/1511/1607/1703/1709) y Windows Server 2016/Server 1709. El fallo proviene de cómo el motor de scripting maneja objetos en la memoria, generando una corrupción de memoria que posibilita que un atacante obtenga los mismos privilegio...

CVE-2019-0611

CVE-2019-0611 is a remote code execution vulnerability in Microsoft Edge via ChakraCore. The issue arises from how the Chakra scripting engine handles objects in memory, described as a memory corruption vulnerability unique from CVE-2019-0592. Affected components include Microsoft Edge/ChakraCore...

CVE-2019-0746

The Linked documents confirm CVE-2019-0746 is an information-disclosure vulnerability in the scripting engine of Microsoft Edge (ChakraCore). The issue arises when the engine mishandles in-memory objects, enabling unauthorized access to sensitive information. Descriptions consistently reference h...

CVE-2020-1195

Summary (CVE-2020-1195): An elevation of privilege vulnerability exists in Microsoft Edge (Chromium-based) stemming from improper input validation in the Feedback extension. The issue could allow an attacker to write files to arbitrary locations and gain elevated privileges. Affected product: Mic...

CVE-2017-0023

CVE-2017-0023 is a remote code execution vulnerability in the Microsoft Edge PDF Library, affecting Windows 8.1, Windows Server 2012/2012 R2, Windows RT 8.1, and Windows 10 (variants such as 1511/1607). Public reports describe memory corruption in the PDF rendering library leading to arbitrary co...

CVE-2017-11836

Technical details for CVE-2017-11836 are not publicly available in the provided documents. Monitor for updates from ChakraCore/Microsoft advisories and related CVEs for disclosure status and fixes.

CVE-2018-8629

CVE-2018-8629 is a remote code execution vulnerability in the Chakra Scripting Engine arising from how objects are handled in memory, affecting Microsoft Edge and ChakraCore. The root cause is memory handling in Chakra; impact is high with potential code execution. Connected documents corroborate...

CVE-2019-1081

CVE-2019-1081 is an information disclosure vulnerability in affected Microsoft browsers caused by improper handling of objects in memory. Exploitation could allow an attacker to obtain information to further compromise the user’s system, typically via web-based attack scenarios (malicious sites o...

CVE-2016-0193

CVE-2016-0193 targets the Chakra JavaScript engine in Microsoft Edge, allowing remote attackers to cause memory corruption via a crafted web site, potentially leading to arbitrary code execution or a denial of service. The vulnerability is part of the Chakra memory-corruption family, with CVSSv3 ...

CVE-2016-1100

Technical details about CVE-2016-1100 are not publicly provided in the supplied documents. Monitor for updates on affected products, impact, and remediation.

CVE-2016-3326

CVE-2016-3326 is an information-disclosure vulnerability affecting Microsoft Internet Explorer (IE9–IE11) and Edge, arising from how the browser handles objects in memory when processing crafted web content. The issue could allow remote attackers to obtain sensitive data via a malicious page. Aff...

CVE-2017-0230

CVE-2017-0230 describes a remote code execution vulnerability in Microsoft Edge related to the Scripting Engine Memory Corruption Vulnerability. Connected sources map the issue to the ChakraCore/Edge JavaScript engine, where memory handling when rendering objects can lead to arbitrary code execut...

CVE-2017-11894

CVE-2017-11894 affects ChakraCore and certain Windows components (including Internet Explorer and Edge on Windows 7/8.1/Server 2008/2012 and Windows 10 releases) due to how the scripting engine handles in-memory objects. The vulnerability allows an attacker to gain the same user rights as the cur...

CVE-2017-11911

Technical details about CVE-2017-11911 are not publicly available in the provided documents. Connected sources reference other CVEs (e.g., CVE-2017-11930) and do not expose affected product/version or remediation for this CVE.

CVE-2017-11918

CVE-2017-11918 is described as a ChakraCore/Edge memory-corruption issue in the scripting engine that could allow an attacker to execute code with the current user’s rights. Connected advisories cite ChakraCore-related RCE vulnerabilities affecting Windows 10 variants and Windows Server 2016, att...

CVE-2018-0954

CVE-2018-0954 describes a remote code execution vulnerability in the scripting engine’s handling of in-memory objects that affects Microsoft browsers. Affected products include Internet Explorer 9/10/11, Edge, and ChakraCore. Root cause: memory/object handling flaw in the scripting engine leading...

CVE-2019-0773

CVE-2019-0773 is a remote code execution vulnerability in Microsoft Edge’s scripting engine (ChakraCore) related to memory handling of objects. Affected component: the Edge scripting engine within ChakraCore. Root cause: memory corruption in the scripting engine can be triggered by crafted object...

CVE-2019-0806

CVE-2019-0806 is a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge, caused by how the engine handles objects in memory (memory corruption). The entry provides CVSS v3.0: HIGH, 7.5 base score (NETWORK attack vector, HIGH attack complexity, NONE privileges,...

CVE-2019-0933

The vulnerability CVE-2019-0933 affects the Chakra scripting engine in Microsoft Edge where objects in memory are mishandled, leading to remote code execution . The root cause is a memory corruption issue within Chakra’s object handling. Impact is described as HIGH with a CVSS v3 base score of 7....

CVE-2019-1196

The CVE-2019-1196 issue is a remote code execution vulnerability in Microsoft Edge’s Chakra scripting engine due to memory handling of objects. The impact is execution of arbitrary code in the current user context with potential full system control if the user has admin rights. The conditionally ...

CVE-2021-26436

Technical details about CVE-2021-26436 (affected component, root cause, exploitability, impact, and fixed version) are not provided in the connected documents. Monitor official advisories (e.g., Microsoft/MSRC) for updates and patches.

CVE-2025-29796

CVE-2025-29796 affects Microsoft Edge for iOS . The vulnerability is described as a UI misrepresentation that could allow an unauthorized attacker to perform spoofing over a network. According to the initial description, the CVSSv3.1 base score is 4.7 (Medium), with attack vector NETWORK , attack...

CVE-2017-11858

CVE-2017-11858 is related to ChakraCore/Edge memory corruption via the scripting engine, enabling a user-rights gain by manipulating in-memory objects. Affected components include ChakraCore and Microsoft Edge on Windows 10 versions 1703/1709 and Windows Server equivalents, tied to how memory obj...

CVE-2019-0593

Technical details about CVE-2019-0593 are not provided in the connected documents. The EUVD entries mention malware but do not specify vulnerability details. Monitor for updates.

CVE-2019-1193

CVE-2019-1193 is a remote code execution vulnerability in Microsoft browsers caused by memory corruption when handling objects in memory. Exploitation requires a user to browse a malicious website or open crafted content; an attacker could gain the user’s privileges and potentially take control o...

CVE-2016-0158

Microsoft Edge on Windows 10 is affected by CVE-2016-0158, an elevation of privilege vulnerability that bypasses the Same Origin Policy via cross‑domain policy enforcement weaknesses. Connected sources describe Edge failing to properly validate JavaScript and enforce domain restrictions, enabling...

CVE-2016-7153

CVE-2016-7153 describes a vulnerability in the HTTP/2 protocol where the TCP congestion window is not considered when determining content length, potentially enabling an attacker to obtain cleartext data by leveraging a web browser configuration that sends third‑party cookies (HEIST). The connect...

CVE-2017-11766

CVE-2017-11766: Microsoft Edge on Windows 10 (Gold/1511/1607/1703) and Windows Server 2016 has a memory handling flaw in Edge that can be exploited to execute arbitrary code in the context of the current user. The underlying root cause is Edge accessing/handling objects in memory in a way that ca...

CVE-2017-11909

Technical details for CVE-2017-11930 are not publicly available in the supplied documents. Monitor for updates.

CVE-2017-11914

CVE-2017-11914 concerns a memory handling issue in the ChakraCore scripting engine used by ChakraCore and Microsoft Edge on Windows 10 (versions 1511, 1607, 1703, 1709) and Windows Server 2016. The root cause is described as how the scripting engine handles objects in memory, leading to a memory ...

CVE-2018-0838

ChakraCore/Edge memory-corruption style RCE vulnerability observed in Microsoft Windows 10 and Edge components. The connected advisories describe remote code execution caused by how the ChakraCore scripting engine handles in-memory objects, affecting Windows 10 Gold, 1511, 1607, 1703, 1709 and Wi...

CVE-2018-0995

CVE-2018-0995 is a ChakraCore/Edge remote code execution vulnerability described as Memory Corruption in the Chakra scripting engine’s handling of in-memory objects. The connected GitHub advisories reiterate: a remote code execution flaw affecting Microsoft Edge and ChakraCore, with CVE-2018-0995...