CVE-2020-17058

CVE-2020-17058 is described as a Microsoft Browser Memory Corruption Vulnerability. The available details show a memory corruption flaw in the Microsoft Browser, with impact on confidentiality, integrity, and availability rated HIGH (CVSS v3.1: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). The vulnerabil...

CVE-2016-7194

CVE-2016-7194 concerns the Chakra JavaScript engine used by Microsoft Edge. The connected advisories indicate a remote code execution / memory corruption vulnerability in ChakraCore, exploitable via a crafted web site, and note that this family includes CVE-2016-3386, CVE-2016-3389, and CVE-2016-...

CVE-2017-0235

CVE-2017-0235 corresponds to a remote code execution vulnerability in Microsoft Edge tied to Chakra's memory handling when rendering objects. The connected advisories describe a memory corruption issue in the Chakra JavaScript engine that could be triggered to execute arbitrary code, affecting Ed...

CVE-2017-11873

Technical details for CVE-2017-11873 are not publicly provided in the supplied documents; related advisories discuss ChakraCore memory corruption broadly. Monitor for updates from Microsoft/Edge security advisories for affected versions and fixes.

CVE-2017-11908

CVE-2017-11908 affects ChakraCore with Windows 10 (1709) where the scripting engine’s in-memory object handling causes memory corruption. This can allow an attacker to execute arbitrary code in the context of the current user (high impact). The provided connected advisories describe multiple vari...

CVE-2017-11909

Technical details for CVE-2017-11930 are not publicly available in the supplied documents. Monitor for updates.

CVE-2017-8645

CVE-2017-8645 is a remote-code-execution memory-corruption vulnerability in Microsoft Edge’s scripting engine (JavaScript/Chakra). Affected: Windows 10 versions 1511–1703 and Windows Server 2016, via Edge rendering objects in memory. Root cause: memory corruption during rendering of objects in th...

CVE-2018-0995

CVE-2018-0995 is a ChakraCore/Edge remote code execution vulnerability described as Memory Corruption in the Chakra scripting engine’s handling of in-memory objects. The connected GitHub advisories reiterate: a remote code execution flaw affecting Microsoft Edge and ChakraCore, with CVE-2018-0995...

CVE-2018-8467

CVE-2018-8467 is a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge and ChakraCore, caused by memory handling of objects. The issue enables code execution via crafted objects in memory and is associated with exploitation in the wild (Exploit-DB entries htt...

CVE-2019-0612

CVE-2019-0612 is a security feature bypass in Microsoft Edge where Click2Play protection improperly handles Flash objects. The bypass does not by itself enable arbitrary code execution, but can undermine the protection mechanism. Affected product: Microsoft Edge on Windows; vulnerable component: ...

CVE-2019-1024

CVE-2019-1024 corresponds to a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge (HTML-based). The issue arises from memory handling of objects in Chakra, enabling an attacker to corrupt memory and execute arbitrary code in the context of the current user. ...

CVE-2017-0141

Technical details for CVE-2017-0141 are not provided in the supplied documents. Public information on affected products, vulnerable components, impact, and remediation cannot be confirmed from these sources; monitor for updates.

CVE-2017-11846

CVE-2017-11846 affects ChakraCore and Edge/IE scripting engine in Windows 7 SP1, Windows Server 2008/2008 R2, 8.1, 10 (various builds), and Windows Server 2012/2012 R2, with memory handling in the scripting engine leading to memory corruption. The vulnerability could allow an attacker to execute ...

CVE-2018-0837

CVE-2018-0837 corresponds to a remote code execution vulnerability in Microsoft Edge and ChakraCore on Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016, arising from how the scripting engine handles objects in memory (Scripting Engine Memory Corruption Vulnerability). Connected a...

CVE-2018-8466

CVE-2018-8466 details a remote code execution in the Chakra scripting engine used by Microsoft Edge and ChakraCore, caused by memory object handling vulnerabilities. The initial entry notes a memory corruption/RC vulnerability, with Edge/ChakraCore as affected. Connected sources corroborate Chakr...

CVE-2019-1140

CVE-2019-1140 is a remote code execution in the Chakra memory handling within Microsoft Edge (HTML-based). The vulnerability could allow arbitrary code execution with the current user’s privileges if a user views a malicious page or ad, enabling data access/modification or account creation. The i...

CVE-2016-7195

CVE-2016-7195 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, exposing memory corruption via a crafted webpage that can lead to remote code execution or memory DO S. This entry is closely tied to CVE-2016-7198 (a different vulnerability with the same attack surface) and is corroborat...

CVE-2017-11912

CVE-2017-11912 is a ChakraCore scripting engine memory corruption vulnerability affecting ChakraCore, IE/Edge on Windows platforms listed in the Initial document. Connected sources describe remote code execution risk due to memory object handling, enabling an attacker to run code in the context o...

CVE-2017-8518

CVE-2017-8518 — Microsoft Edge Memory Corruption Vulnerability . A remote code execution flaw exists when Edge improperly accesses objects in memory in the scripting engine, allowing arbitrary code execution in the context of the current user. Root cause: memory handling error in the scripting en...

CVE-2019-0764

Technical details for CVE-2019-0764 are not publicly available in the provided documents. The materials reference general browser tampering and unrelated Windows KB updates; monitor for future updates for affected products, components, and remediation.

CVE-2019-0770

CVE-2019-0770 is a remote code execution vulnerability in the Microsoft Edge scripting engine due to memory handling of objects. Connected advisories describe similar memory‑corruption issues in Microsoft.ChakraCore scripting engines, confirming the vulnerability class but do not provide concrete...

CVE-2016-1100

Technical details about CVE-2016-1100 are not publicly provided in the supplied documents. Monitor for updates on affected products, impact, and remediation.

CVE-2016-3319

CVE-2016-3319 affects the Windows PDF Library in Windows 8.1, Windows Server 2012 R2/2012, Windows 10 (various builds), and Edge. The vulnerability stems from how the PDF library handles memory objects in PDFs, allowing remote code execution when a crafted PDF is opened or viewed. Connected sourc...

CVE-2017-0134

CVE-2017-0134 is described as a remote code execution vulnerability in Microsoft's scripting engines for Edge/Internet Explorer, caused by memory handling when rendering objects in memory. The exploit path involves a remote, unauthenticated attacker enticing the user to open a specially crafted p...

CVE-2018-8629

CVE-2018-8629 is a remote code execution vulnerability in the Chakra Scripting Engine arising from how objects are handled in memory, affecting Microsoft Edge and ChakraCore. The root cause is memory handling in Chakra; impact is high with potential code execution. Connected documents corroborate...

CVE-2019-0769

CVE-2019-0769 is a remote code-execution vulnerability in Microsoft Edge’s scripting engine that can be triggered by memory handling in objects. The entry references a Microsoft advisory (MSRC CVE-2019-0769). The CVSS suggests high impact across confidentiality, integrity, and availability with n...

CVE-2019-0916

Technical details about CVE-2019-0916 are not provided in the connected documents. The EUVD entries mention malware but do not describe affected software, root cause, payload, or fixes. Monitor for updates.

CVE-2019-0923

Technical details for CVE-2019-0923 are not publicly available in the provided documents; monitor for updates.

CVE-2020-1065

CVE-2020-1065 refers to a remote code execution vulnerability in the ChakraCore scripting engine, caused by memory corruption when handling objects in memory. Affects ChakraCore and, via Microsoft Edge integration, related Chakra components. The impact is that an attacker could execute arbitrary ...

CVE-2016-7189

CVE-2016-7189 affects the Chakra JavaScript engine in Microsoft Edge. The connected sources describe a remote code execution vulnerability triggered by visiting a crafted web page, stemming from improper handling of objects in memory. The impact is high (RCE), with attack vector over the network ...

CVE-2017-11827

CVE-2017-11827 is a memory corruption vulnerability in Microsoft Internet Explorer/Edge that could allow remote code execution with the current user’s privileges. The issue affects Internet Explorer and Edge components on Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, Win...

CVE-2019-0746

The Linked documents confirm CVE-2019-0746 is an information-disclosure vulnerability in the scripting engine of Microsoft Edge (ChakraCore). The issue arises when the engine mishandles in-memory objects, enabling unauthorized access to sensitive information. Descriptions consistently reference h...

CVE-2019-0917

Technical details are not publicly available in the provided documents for CVE-2019-0917; monitor for updates from authoritative sources.

CVE-2019-1081

CVE-2019-1081 is an information disclosure vulnerability in affected Microsoft browsers caused by improper handling of objects in memory. Exploitation could allow an attacker to obtain information to further compromise the user’s system, typically via web-based attack scenarios (malicious sites o...

CVE-2020-1220

CVE-2020-1220: Edge (Chromium-based) in IE Mode spoofing vulnerability due to improper handling of specific redirects. Affects Microsoft Edge in IE Mode; vulnerability allows spoofing of the displayed site. Connected CNVD entry reiterates Edge spoofing context; no vendor-provided fix details in t...

CVE-2020-1569

CVE-2020-1569 (Microsoft Edge Memory Corruption) describes a remote code execution when Edge improperly accesses objects in memory, allowing arbitrary code execution in the context of the current user. The underlying issue is memory object handling in Edge, enabling an attacker to run code via a ...

CVE-2025-29796

CVE-2025-29796 affects Microsoft Edge for iOS . The vulnerability is described as a UI misrepresentation that could allow an unauthorized attacker to perform spoofing over a network. According to the initial description, the CVSSv3.1 base score is 4.7 (Medium), with attack vector NETWORK , attack...

CVE-2016-3326

CVE-2016-3326 is an information-disclosure vulnerability affecting Microsoft Internet Explorer (IE9–IE11) and Edge, arising from how the browser handles objects in memory when processing crafted web content. The issue could allow remote attackers to obtain sensitive data via a malicious page. Aff...

CVE-2017-0068

Technical details (affected product/component/versions/root cause/impact) for CVE-2017-0068 are not publicly provided in the supplied documents. Monitor for updates in connected sources to capture concrete details.

CVE-2017-11836

Technical details for CVE-2017-11836 are not publicly available in the provided documents. Monitor for updates from ChakraCore/Microsoft advisories and related CVEs for disclosure status and fixes.

CVE-2018-0770

CVE-2018-0770 is a remote code execution vulnerability in Microsoft Edge's scripting engine memory handling. The CPAI-2018-0134 advisory states a remote unauthenticated attacker could exploit this by enticing a user to open a specially crafted webpage, affecting Edge on Windows 10 releases (Gold,...

CVE-2020-0813

CVE-2020-0813 (ChakraCore) is a memory-information-disclosure vulnerability in the Chakra scripting engine. The issue arises when Chakra improperly discloses the contents of memory, enabling an attacker to access memory data from objects whose creation address is known. The vulnerability is addre...

CVE-2015-2494

Affected software: Microsoft Internet Explorer 7–11 and Microsoft Edge. Vulnerability: memory corruption leading to remote code execution or denial of service via a crafted web site. Root cause / details: memory corruption vulnerability in the browser rendering/handling of web content (as describ...

CVE-2017-0023

CVE-2017-0023 is a remote code execution vulnerability in the Microsoft Edge PDF Library, affecting Windows 8.1, Windows Server 2012/2012 R2, Windows RT 8.1, and Windows 10 (variants such as 1511/1607). Public reports describe memory corruption in the PDF rendering library leading to arbitrary co...

CVE-2017-11766

CVE-2017-11766: Microsoft Edge on Windows 10 (Gold/1511/1607/1703) and Windows Server 2016 has a memory handling flaw in Edge that can be exploited to execute arbitrary code in the context of the current user. The underlying root cause is Edge accessing/handling objects in memory in a way that ca...

CVE-2017-11918

CVE-2017-11918 is described as a ChakraCore/Edge memory-corruption issue in the scripting engine that could allow an attacker to execute code with the current user’s rights. Connected advisories cite ChakraCore-related RCE vulnerabilities affecting Windows 10 variants and Windows Server 2016, att...

CVE-2018-0768

CVE-2018-0768 corresponds to a memory corruption vulnerability in the Microsoft Edge scripting engine on Windows 10 (1709) that allows a remote attacker to execute arbitrary code in the context of the current user by convincing a user to open a crafted page. Connected advisories confirm a remote ...

CVE-2018-0838

ChakraCore/Edge memory-corruption style RCE vulnerability observed in Microsoft Windows 10 and Edge components. The connected advisories describe remote code execution caused by how the ChakraCore scripting engine handles in-memory objects, affecting Windows 10 Gold, 1511, 1607, 1703, 1709 and Wi...

CVE-2018-8618

CVE-2018-8618 describes a remote code execution VULNERABILITY in the Chakra scripting engine, caused by how it handles objects in memory. The issue affects Microsoft Edge and ChakraCore, with a memory corruption root cause that can enable code execution on affected systems. Connected advisories c...

CVE-2019-0593

Technical details about CVE-2019-0593 are not provided in the connected documents. The EUVD entries mention malware but do not specify vulnerability details. Monitor for updates.