CVE-2017-11909

Technical details for CVE-2017-11930 are not publicly available in the supplied documents. Monitor for updates.

CVE-2017-11912

CVE-2017-11912 is a ChakraCore scripting engine memory corruption vulnerability affecting ChakraCore, IE/Edge on Windows platforms listed in the Initial document. Connected sources describe remote code execution risk due to memory object handling, enabling an attacker to run code in the context o...

CVE-2017-8645

CVE-2017-8645 is a remote-code-execution memory-corruption vulnerability in Microsoft Edge’s scripting engine (JavaScript/Chakra). Affected: Windows 10 versions 1511–1703 and Windows Server 2016, via Edge rendering objects in memory. Root cause: memory corruption during rendering of objects in th...

CVE-2018-0995

CVE-2018-0995 is a ChakraCore/Edge remote code execution vulnerability described as Memory Corruption in the Chakra scripting engine’s handling of in-memory objects. The connected GitHub advisories reiterate: a remote code execution flaw affecting Microsoft Edge and ChakraCore, with CVE-2018-0995...

CVE-2018-8629

CVE-2018-8629 is a remote code execution vulnerability in the Chakra Scripting Engine arising from how objects are handled in memory, affecting Microsoft Edge and ChakraCore. The root cause is memory handling in Chakra; impact is high with potential code execution. Connected documents corroborate...

CVE-2019-0612

CVE-2019-0612 is a security feature bypass in Microsoft Edge where Click2Play protection improperly handles Flash objects. The bypass does not by itself enable arbitrary code execution, but can undermine the protection mechanism. Affected product: Microsoft Edge on Windows; vulnerable component: ...

CVE-2019-0923

Technical details for CVE-2019-0923 are not publicly available in the provided documents; monitor for updates.

CVE-2019-1140

CVE-2019-1140 is a remote code execution in the Chakra memory handling within Microsoft Edge (HTML-based). The vulnerability could allow arbitrary code execution with the current user’s privileges if a user views a malicious page or ad, enabling data access/modification or account creation. The i...

CVE-2020-17058

CVE-2020-17058 is described as a Microsoft Browser Memory Corruption Vulnerability. The available details show a memory corruption flaw in the Microsoft Browser, with impact on confidentiality, integrity, and availability rated HIGH (CVSS v3.1: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). The vulnerabil...

CVE-2016-3319

CVE-2016-3319 affects the Windows PDF Library in Windows 8.1, Windows Server 2012 R2/2012, Windows 10 (various builds), and Edge. The vulnerability stems from how the PDF library handles memory objects in PDFs, allowing remote code execution when a crafted PDF is opened or viewed. Connected sourc...

CVE-2016-7189

CVE-2016-7189 affects the Chakra JavaScript engine in Microsoft Edge. The connected sources describe a remote code execution vulnerability triggered by visiting a crafted web page, stemming from improper handling of objects in memory. The impact is high (RCE), with attack vector over the network ...

CVE-2018-8466

CVE-2018-8466 details a remote code execution in the Chakra scripting engine used by Microsoft Edge and ChakraCore, caused by memory object handling vulnerabilities. The initial entry notes a memory corruption/RC vulnerability, with Edge/ChakraCore as affected. Connected sources corroborate Chakr...

CVE-2019-0770

CVE-2019-0770 is a remote code execution vulnerability in the Microsoft Edge scripting engine due to memory handling of objects. Connected advisories describe similar memory‑corruption issues in Microsoft.ChakraCore scripting engines, confirming the vulnerability class but do not provide concrete...

CVE-2019-0916

Technical details about CVE-2019-0916 are not provided in the connected documents. The EUVD entries mention malware but do not describe affected software, root cause, payload, or fixes. Monitor for updates.

CVE-2019-1196

The CVE-2019-1196 issue is a remote code execution vulnerability in Microsoft Edge’s Chakra scripting engine due to memory handling of objects. The impact is execution of arbitrary code in the current user context with potential full system control if the user has admin rights. The conditionally ...

CVE-2020-1065

CVE-2020-1065 refers to a remote code execution vulnerability in the ChakraCore scripting engine, caused by memory corruption when handling objects in memory. Affects ChakraCore and, via Microsoft Edge integration, related Chakra components. The impact is that an attacker could execute arbitrary ...

CVE-2016-1100

Technical details about CVE-2016-1100 are not publicly provided in the supplied documents. Monitor for updates on affected products, impact, and remediation.

CVE-2017-11827

CVE-2017-11827 is a memory corruption vulnerability in Microsoft Internet Explorer/Edge that could allow remote code execution with the current user’s privileges. The issue affects Internet Explorer and Edge components on Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, Win...

CVE-2017-11836

Technical details for CVE-2017-11836 are not publicly available in the provided documents. Monitor for updates from ChakraCore/Microsoft advisories and related CVEs for disclosure status and fixes.

CVE-2019-0764

Technical details for CVE-2019-0764 are not publicly available in the provided documents. The materials reference general browser tampering and unrelated Windows KB updates; monitor for future updates for affected products, components, and remediation.

CVE-2019-0769

CVE-2019-0769 is a remote code-execution vulnerability in Microsoft Edge’s scripting engine that can be triggered by memory handling in objects. The entry references a Microsoft advisory (MSRC CVE-2019-0769). The CVSS suggests high impact across confidentiality, integrity, and availability with n...

CVE-2016-3326

CVE-2016-3326 is an information-disclosure vulnerability affecting Microsoft Internet Explorer (IE9–IE11) and Edge, arising from how the browser handles objects in memory when processing crafted web content. The issue could allow remote attackers to obtain sensitive data via a malicious page. Aff...

CVE-2017-0134

CVE-2017-0134 is described as a remote code execution vulnerability in Microsoft's scripting engines for Edge/Internet Explorer, caused by memory handling when rendering objects in memory. The exploit path involves a remote, unauthenticated attacker enticing the user to open a specially crafted p...

CVE-2019-0917

Technical details are not publicly available in the provided documents for CVE-2019-0917; monitor for updates from authoritative sources.

CVE-2019-1081

CVE-2019-1081 is an information disclosure vulnerability in affected Microsoft browsers caused by improper handling of objects in memory. Exploitation could allow an attacker to obtain information to further compromise the user’s system, typically via web-based attack scenarios (malicious sites o...

CVE-2020-1195

Summary (CVE-2020-1195): An elevation of privilege vulnerability exists in Microsoft Edge (Chromium-based) stemming from improper input validation in the Feedback extension. The issue could allow an attacker to write files to arbitrary locations and gain elevated privileges. Affected product: Mic...

CVE-2020-1569

CVE-2020-1569 (Microsoft Edge Memory Corruption) describes a remote code execution when Edge improperly accesses objects in memory, allowing arbitrary code execution in the context of the current user. The underlying issue is memory object handling in Edge, enabling an attacker to run code via a ...

CVE-2015-2494

Affected software: Microsoft Internet Explorer 7–11 and Microsoft Edge. Vulnerability: memory corruption leading to remote code execution or denial of service via a crafted web site. Root cause / details: memory corruption vulnerability in the browser rendering/handling of web content (as describ...

CVE-2017-0023

CVE-2017-0023 is a remote code execution vulnerability in the Microsoft Edge PDF Library, affecting Windows 8.1, Windows Server 2012/2012 R2, Windows RT 8.1, and Windows 10 (variants such as 1511/1607). Public reports describe memory corruption in the PDF rendering library leading to arbitrary co...

CVE-2017-8518

CVE-2017-8518 — Microsoft Edge Memory Corruption Vulnerability . A remote code execution flaw exists when Edge improperly accesses objects in memory in the scripting engine, allowing arbitrary code execution in the context of the current user. Root cause: memory handling error in the scripting en...

CVE-2018-0838

ChakraCore/Edge memory-corruption style RCE vulnerability observed in Microsoft Windows 10 and Edge components. The connected advisories describe remote code execution caused by how the ChakraCore scripting engine handles in-memory objects, affecting Windows 10 Gold, 1511, 1607, 1703, 1709 and Wi...

CVE-2019-0611

CVE-2019-0611 is a remote code execution vulnerability in Microsoft Edge via ChakraCore. The issue arises from how the Chakra scripting engine handles objects in memory, described as a memory corruption vulnerability unique from CVE-2019-0592. Affected components include Microsoft Edge/ChakraCore...

CVE-2020-0813

CVE-2020-0813 (ChakraCore) is a memory-information-disclosure vulnerability in the Chakra scripting engine. The issue arises when Chakra improperly discloses the contents of memory, enabling an attacker to access memory data from objects whose creation address is known. The vulnerability is addre...

CVE-2020-1220

CVE-2020-1220: Edge (Chromium-based) in IE Mode spoofing vulnerability due to improper handling of specific redirects. Affects Microsoft Edge in IE Mode; vulnerability allows spoofing of the displayed site. Connected CNVD entry reiterates Edge spoofing context; no vendor-provided fix details in t...

CVE-2020-1462

CVE-2020-1462 is described as an information-disclosure vulnerability that occurs when Skype for Business is accessed through Microsoft Edge (EdgeHTML-based). The available initial description states the affected component as Skype for Business via EdgeHTML-based Edge, with the impact limited to ...

CVE-2017-11894

CVE-2017-11894 affects ChakraCore and certain Windows components (including Internet Explorer and Edge on Windows 7/8.1/Server 2008/2012 and Windows 10 releases) due to how the scripting engine handles in-memory objects. The vulnerability allows an attacker to gain the same user rights as the cur...

CVE-2019-0593

Technical details about CVE-2019-0593 are not provided in the connected documents. The EUVD entries mention malware but do not specify vulnerability details. Monitor for updates.

CVE-2019-0746

The Linked documents confirm CVE-2019-0746 is an information-disclosure vulnerability in the scripting engine of Microsoft Edge (ChakraCore). The issue arises when the engine mishandles in-memory objects, enabling unauthorized access to sensitive information. Descriptions consistently reference h...

CVE-2016-7153

CVE-2016-7153 describes a vulnerability in the HTTP/2 protocol where the TCP congestion window is not considered when determining content length, potentially enabling an attacker to obtain cleartext data by leveraging a web browser configuration that sends third‑party cookies (HEIST). The connect...

CVE-2017-0068

Technical details (affected product/component/versions/root cause/impact) for CVE-2017-0068 are not publicly provided in the supplied documents. Monitor for updates in connected sources to capture concrete details.

CVE-2017-0230

CVE-2017-0230 describes a remote code execution vulnerability in Microsoft Edge related to the Scripting Engine Memory Corruption Vulnerability. Connected sources map the issue to the ChakraCore/Edge JavaScript engine, where memory handling when rendering objects can lead to arbitrary code execut...

CVE-2017-11840

CVE-2017-11840 αφορά ChakraCore/Microsoft Edge en Windows 10 (Gold/1511/1607/1703/1709) y Windows Server 2016/Server 1709. El fallo proviene de cómo el motor de scripting maneja objetos en la memoria, generando una corrupción de memoria que posibilita que un atacante obtenga los mismos privilegio...

CVE-2017-11858

CVE-2017-11858 is related to ChakraCore/Edge memory corruption via the scripting engine, enabling a user-rights gain by manipulating in-memory objects. Affected components include ChakraCore and Microsoft Edge on Windows 10 versions 1703/1709 and Windows Server equivalents, tied to how memory obj...

CVE-2017-11911

Technical details about CVE-2017-11911 are not publicly available in the provided documents. Connected sources reference other CVEs (e.g., CVE-2017-11930) and do not expose affected product/version or remediation for this CVE.

CVE-2017-11918

CVE-2017-11918 is described as a ChakraCore/Edge memory-corruption issue in the scripting engine that could allow an attacker to execute code with the current user’s rights. Connected advisories cite ChakraCore-related RCE vulnerabilities affecting Windows 10 variants and Windows Server 2016, att...

CVE-2018-0954

CVE-2018-0954 describes a remote code execution vulnerability in the scripting engine’s handling of in-memory objects that affects Microsoft browsers. Affected products include Internet Explorer 9/10/11, Edge, and ChakraCore. Root cause: memory/object handling flaw in the scripting engine leading...

CVE-2018-8618

CVE-2018-8618 describes a remote code execution VULNERABILITY in the Chakra scripting engine, caused by how it handles objects in memory. The issue affects Microsoft Edge and ChakraCore, with a memory corruption root cause that can enable code execution on affected systems. Connected advisories c...

CVE-2019-0922

Technical details about CVE-2019-0922 are not publicly available in the provided documents. Monitor for updates from official advisories to determine affected products, impact, and remediation.

CVE-2019-1193

CVE-2019-1193 is a remote code execution vulnerability in Microsoft browsers caused by memory corruption when handling objects in memory. Exploitation requires a user to browse a malicious website or open crafted content; an attacker could gain the user’s privileges and potentially take control o...

CVE-2020-0816

Technical details (affected product/component/versions/root cause/impact/fix) for CVE-2020-0816 are not publicly provided in the connected documents. Monitor for updates in the Red Hat, CNVD, NVD and CVE records as new information arises.