CVE-2016-7195

CVE-2016-7195 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, exposing memory corruption via a crafted webpage that can lead to remote code execution or memory DO S. This entry is closely tied to CVE-2016-7198 (a different vulnerability with the same attack surface) and is corroborat...

CVE-2017-0032

CVE-2017-0032 describes a remote code execution vulnerability in how Microsoft scripting engines render in-memory objects in Microsoft browsers. The issue allows an attacker to corrupt memory and execute arbitrary code with the current user’s privileges; if the user has administrative rights, the...

CVE-2018-0758

CVE-2018-0758 affects Microsoft Edge’s Scripting Engine memory handling on Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016. The vulnerability enables remote code execution in the context of the current user due to how objects are managed in memory. Connected documents corroborat...

CVE-2018-0876

Technical details for CVE-2018-0876 are not publicly available in the provided documents. The connected sources discuss other advisories and updates but do not specify impacted products, root cause, impact, or fixes for this CVE. Monitor for updates.

CVE-2018-8629

CVE-2018-8629 is a remote code execution vulnerability in the Chakra Scripting Engine arising from how objects are handled in memory, affecting Microsoft Edge and ChakraCore. The root cause is memory handling in Chakra; impact is high with potential code execution. Connected documents corroborate...

CVE-2019-0612

CVE-2019-0612 is a security feature bypass in Microsoft Edge where Click2Play protection improperly handles Flash objects. The bypass does not by itself enable arbitrary code execution, but can undermine the protection mechanism. Affected product: Microsoft Edge on Windows; vulnerable component: ...

CVE-2021-26436

Technical details about CVE-2021-26436 (affected component, root cause, exploitability, impact, and fixed version) are not provided in the connected documents. Monitor official advisories (e.g., Microsoft/MSRC) for updates and patches.

CVE-2024-38156

CVE-2024-38156 affects Microsoft Edge (Chromium-based). The connected sources describe a UI spoofing (SUI) vulnerability in Edge where the web page structure protection is insufficient, enabling a deceptive user interface. Root cause: inadequate protection of page structure allows spoofing of UI ...

CVE-2016-7189

CVE-2016-7189 affects the Chakra JavaScript engine in Microsoft Edge. The connected sources describe a remote code execution vulnerability triggered by visiting a crafted web page, stemming from improper handling of objects in memory. The impact is high (RCE), with attack vector over the network ...

CVE-2017-11836

Technical details for CVE-2017-11836 are not publicly available in the provided documents. Monitor for updates from ChakraCore/Microsoft advisories and related CVEs for disclosure status and fixes.

CVE-2017-11873

Technical details for CVE-2017-11873 are not publicly provided in the supplied documents; related advisories discuss ChakraCore memory corruption broadly. Monitor for updates from Microsoft/Edge security advisories for affected versions and fixes.

CVE-2019-0770

CVE-2019-0770 is a remote code execution vulnerability in the Microsoft Edge scripting engine due to memory handling of objects. Connected advisories describe similar memory‑corruption issues in Microsoft.ChakraCore scripting engines, confirming the vulnerability class but do not provide concrete...

CVE-2019-0917

Technical details are not publicly available in the provided documents for CVE-2019-0917; monitor for updates from authoritative sources.

CVE-2020-1065

CVE-2020-1065 refers to a remote code execution vulnerability in the ChakraCore scripting engine, caused by memory corruption when handling objects in memory. Affects ChakraCore and, via Microsoft Edge integration, related Chakra components. The impact is that an attacker could execute arbitrary ...

CVE-2020-1569

CVE-2020-1569 (Microsoft Edge Memory Corruption) describes a remote code execution when Edge improperly accesses objects in memory, allowing arbitrary code execution in the context of the current user. The underlying issue is memory object handling in Edge, enabling an attacker to run code via a ...

CVE-2017-11827

CVE-2017-11827 is a memory corruption vulnerability in Microsoft Internet Explorer/Edge that could allow remote code execution with the current user’s privileges. The issue affects Internet Explorer and Edge components on Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, Win...

CVE-2017-11909

Technical details for CVE-2017-11930 are not publicly available in the supplied documents. Monitor for updates.

CVE-2018-0995

CVE-2018-0995 is a ChakraCore/Edge remote code execution vulnerability described as Memory Corruption in the Chakra scripting engine’s handling of in-memory objects. The connected GitHub advisories reiterate: a remote code execution flaw affecting Microsoft Edge and ChakraCore, with CVE-2018-0995...

CVE-2019-0764

Technical details for CVE-2019-0764 are not publicly available in the provided documents. The materials reference general browser tampering and unrelated Windows KB updates; monitor for future updates for affected products, components, and remediation.

CVE-2019-0769

CVE-2019-0769 is a remote code-execution vulnerability in Microsoft Edge’s scripting engine that can be triggered by memory handling in objects. The entry references a Microsoft advisory (MSRC CVE-2019-0769). The CVSS suggests high impact across confidentiality, integrity, and availability with n...

CVE-2019-0923

Technical details for CVE-2019-0923 are not publicly available in the provided documents; monitor for updates.

CVE-2019-1081

CVE-2019-1081 is an information disclosure vulnerability in affected Microsoft browsers caused by improper handling of objects in memory. Exploitation could allow an attacker to obtain information to further compromise the user’s system, typically via web-based attack scenarios (malicious sites o...

CVE-2020-0813

CVE-2020-0813 (ChakraCore) is a memory-information-disclosure vulnerability in the Chakra scripting engine. The issue arises when Chakra improperly discloses the contents of memory, enabling an attacker to access memory data from objects whose creation address is known. The vulnerability is addre...

CVE-2017-0023

CVE-2017-0023 is a remote code execution vulnerability in the Microsoft Edge PDF Library, affecting Windows 8.1, Windows Server 2012/2012 R2, Windows RT 8.1, and Windows 10 (variants such as 1511/1607). Public reports describe memory corruption in the PDF rendering library leading to arbitrary co...

CVE-2017-0134

CVE-2017-0134 is described as a remote code execution vulnerability in Microsoft's scripting engines for Edge/Internet Explorer, caused by memory handling when rendering objects in memory. The exploit path involves a remote, unauthenticated attacker enticing the user to open a specially crafted p...

CVE-2018-0838

ChakraCore/Edge memory-corruption style RCE vulnerability observed in Microsoft Windows 10 and Edge components. The connected advisories describe remote code execution caused by how the ChakraCore scripting engine handles in-memory objects, affecting Windows 10 Gold, 1511, 1607, 1703, 1709 and Wi...

CVE-2019-0611

CVE-2019-0611 is a remote code execution vulnerability in Microsoft Edge via ChakraCore. The issue arises from how the Chakra scripting engine handles objects in memory, described as a memory corruption vulnerability unique from CVE-2019-0592. Affected components include Microsoft Edge/ChakraCore...

CVE-2015-2494

Affected software: Microsoft Internet Explorer 7–11 and Microsoft Edge. Vulnerability: memory corruption leading to remote code execution or denial of service via a crafted web site. Root cause / details: memory corruption vulnerability in the browser rendering/handling of web content (as describ...

CVE-2017-0068

Technical details (affected product/component/versions/root cause/impact) for CVE-2017-0068 are not publicly provided in the supplied documents. Monitor for updates in connected sources to capture concrete details.

CVE-2017-11894

CVE-2017-11894 affects ChakraCore and certain Windows components (including Internet Explorer and Edge on Windows 7/8.1/Server 2008/2012 and Windows 10 releases) due to how the scripting engine handles in-memory objects. The vulnerability allows an attacker to gain the same user rights as the cur...

CVE-2017-11911

Technical details about CVE-2017-11911 are not publicly available in the provided documents. Connected sources reference other CVEs (e.g., CVE-2017-11930) and do not expose affected product/version or remediation for this CVE.

CVE-2017-11918

CVE-2017-11918 is described as a ChakraCore/Edge memory-corruption issue in the scripting engine that could allow an attacker to execute code with the current user’s rights. Connected advisories cite ChakraCore-related RCE vulnerabilities affecting Windows 10 variants and Windows Server 2016, att...

CVE-2017-8518

CVE-2017-8518 — Microsoft Edge Memory Corruption Vulnerability . A remote code execution flaw exists when Edge improperly accesses objects in memory in the scripting engine, allowing arbitrary code execution in the context of the current user. Root cause: memory handling error in the scripting en...

CVE-2017-8645

CVE-2017-8645 is a remote-code-execution memory-corruption vulnerability in Microsoft Edge’s scripting engine (JavaScript/Chakra). Affected: Windows 10 versions 1511–1703 and Windows Server 2016, via Edge rendering objects in memory. Root cause: memory corruption during rendering of objects in th...

CVE-2018-0954

CVE-2018-0954 describes a remote code execution vulnerability in the scripting engine’s handling of in-memory objects that affects Microsoft browsers. Affected products include Internet Explorer 9/10/11, Edge, and ChakraCore. Root cause: memory/object handling flaw in the scripting engine leading...

CVE-2019-0746

The Linked documents confirm CVE-2019-0746 is an information-disclosure vulnerability in the scripting engine of Microsoft Edge (ChakraCore). The issue arises when the engine mishandles in-memory objects, enabling unauthorized access to sensitive information. Descriptions consistently reference h...

CVE-2019-0922

Technical details about CVE-2019-0922 are not publicly available in the provided documents. Monitor for updates from official advisories to determine affected products, impact, and remediation.

CVE-2019-1193

CVE-2019-1193 is a remote code execution vulnerability in Microsoft browsers caused by memory corruption when handling objects in memory. Exploitation requires a user to browse a malicious website or open crafted content; an attacker could gain the user’s privileges and potentially take control o...

CVE-2020-1195

Summary (CVE-2020-1195): An elevation of privilege vulnerability exists in Microsoft Edge (Chromium-based) stemming from improper input validation in the Feedback extension. The issue could allow an attacker to write files to arbitrary locations and gain elevated privileges. Affected product: Mic...

CVE-2020-1220

CVE-2020-1220: Edge (Chromium-based) in IE Mode spoofing vulnerability due to improper handling of specific redirects. Affects Microsoft Edge in IE Mode; vulnerability allows spoofing of the displayed site. Connected CNVD entry reiterates Edge spoofing context; no vendor-provided fix details in t...

CVE-2020-1462

CVE-2020-1462 is described as an information-disclosure vulnerability that occurs when Skype for Business is accessed through Microsoft Edge (EdgeHTML-based). The available initial description states the affected component as Skype for Business via EdgeHTML-based Edge, with the impact limited to ...

CVE-2016-3326

CVE-2016-3326 is an information-disclosure vulnerability affecting Microsoft Internet Explorer (IE9–IE11) and Edge, arising from how the browser handles objects in memory when processing crafted web content. The issue could allow remote attackers to obtain sensitive data via a malicious page. Aff...

CVE-2016-7153

CVE-2016-7153 describes a vulnerability in the HTTP/2 protocol where the TCP congestion window is not considered when determining content length, potentially enabling an attacker to obtain cleartext data by leveraging a web browser configuration that sends third‑party cookies (HEIST). The connect...

CVE-2017-11840

CVE-2017-11840 αφορά ChakraCore/Microsoft Edge en Windows 10 (Gold/1511/1607/1703/1709) y Windows Server 2016/Server 1709. El fallo proviene de cómo el motor de scripting maneja objetos en la memoria, generando una corrupción de memoria que posibilita que un atacante obtenga los mismos privilegio...

CVE-2017-11858

CVE-2017-11858 is related to ChakraCore/Edge memory corruption via the scripting engine, enabling a user-rights gain by manipulating in-memory objects. Affected components include ChakraCore and Microsoft Edge on Windows 10 versions 1703/1709 and Windows Server equivalents, tied to how memory obj...

CVE-2017-11889

Technical details for CVE-2017-11889 are not provided in the supplied documents. Please monitor official advisories and vendor advisories for updates, patches, and exact impact guidance once publicly disclosed.

CVE-2019-0806

CVE-2019-0806 is a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge, caused by how the engine handles objects in memory (memory corruption). The entry provides CVSS v3.0: HIGH, 7.5 base score (NETWORK attack vector, HIGH attack complexity, NONE privileges,...

CVE-2020-0816

Technical details (affected product/component/versions/root cause/impact/fix) for CVE-2020-0816 are not publicly provided in the connected documents. Monitor for updates in the Red Hat, CNVD, NVD and CVE records as new information arises.

CVE-2016-0193

CVE-2016-0193 targets the Chakra JavaScript engine in Microsoft Edge, allowing remote attackers to cause memory corruption via a crafted web site, potentially leading to arbitrary code execution or a denial of service. The vulnerability is part of the Chakra memory-corruption family, with CVSSv3 ...

CVE-2017-0230

CVE-2017-0230 describes a remote code execution vulnerability in Microsoft Edge related to the Scripting Engine Memory Corruption Vulnerability. Connected sources map the issue to the ChakraCore/Edge JavaScript engine, where memory handling when rendering objects can lead to arbitrary code execut...