CVE-2019-0933

The vulnerability CVE-2019-0933 affects the Chakra scripting engine in Microsoft Edge where objects in memory are mishandled, leading to remote code execution . The root cause is a memory corruption issue within Chakra’s object handling. Impact is described as HIGH with a CVSS v3 base score of 7....

CVE-2019-1081

CVE-2019-1081 is an information disclosure vulnerability in affected Microsoft browsers caused by improper handling of objects in memory. Exploitation could allow an attacker to obtain information to further compromise the user’s system, typically via web-based attack scenarios (malicious sites o...

CVE-2020-1220

CVE-2020-1220: Edge (Chromium-based) in IE Mode spoofing vulnerability due to improper handling of specific redirects. Affects Microsoft Edge in IE Mode; vulnerability allows spoofing of the displayed site. Connected CNVD entry reiterates Edge spoofing context; no vendor-provided fix details in t...

CVE-2020-1462

CVE-2020-1462 is described as an information-disclosure vulnerability that occurs when Skype for Business is accessed through Microsoft Edge (EdgeHTML-based). The available initial description states the affected component as Skype for Business via EdgeHTML-based Edge, with the impact limited to ...

CVE-2017-0067

A remote code execution (RCE) vulnerability exists in the way affected Microsoft scripting engines render objects in memory within Microsoft browsers . This memory corruption flaw could allow a remote attacker to execute arbitrary code in the context of the current user. Successful exploitation c...

CVE-2017-0230

CVE-2017-0230 describes a remote code execution vulnerability in Microsoft Edge related to the Scripting Engine Memory Corruption Vulnerability. Connected sources map the issue to the ChakraCore/Edge JavaScript engine, where memory handling when rendering objects can lead to arbitrary code execut...

CVE-2017-11858

CVE-2017-11858 is related to ChakraCore/Edge memory corruption via the scripting engine, enabling a user-rights gain by manipulating in-memory objects. Affected components include ChakraCore and Microsoft Edge on Windows 10 versions 1703/1709 and Windows Server equivalents, tied to how memory obj...

CVE-2018-0857

ChakraCore/Edge memory-corruption RCE chain is described in the connected advisories: ChakraCore on Microsoft Edge and ChakraCore components within Windows 10 (various builds) is vulnerable when the scripting engine mishandles in-memory objects, enabling remote code execution. The exact affected ...

CVE-2018-8452

CVE-2018-8452 is an information disclosure vulnerability reported in the scripting engine used by Microsoft browsers. The affected components cited in connected documents are ChakraCore, Internet Explorer 11, and Microsoft Edge, with the root cause described as improper handling of objects in mem...

CVE-2018-8629

CVE-2018-8629 is a remote code execution vulnerability in the Chakra Scripting Engine arising from how objects are handled in memory, affecting Microsoft Edge and ChakraCore. The root cause is memory handling in Chakra; impact is high with potential code execution. Connected documents corroborate...

CVE-2019-0593

Technical details about CVE-2019-0593 are not provided in the connected documents. The EUVD entries mention malware but do not specify vulnerability details. Monitor for updates.

CVE-2019-0611

CVE-2019-0611 is a remote code execution vulnerability in Microsoft Edge via ChakraCore. The issue arises from how the Chakra scripting engine handles objects in memory, described as a memory corruption vulnerability unique from CVE-2019-0592. Affected components include Microsoft Edge/ChakraCore...

CVE-2019-0916

Technical details about CVE-2019-0916 are not provided in the connected documents. The EUVD entries mention malware but do not describe affected software, root cause, payload, or fixes. Monitor for updates.

CVE-2019-1193

CVE-2019-1193 is a remote code execution vulnerability in Microsoft browsers caused by memory corruption when handling objects in memory. Exploitation requires a user to browse a malicious website or open crafted content; an attacker could gain the user’s privileges and potentially take control o...

CVE-2020-1195

Summary (CVE-2020-1195): An elevation of privilege vulnerability exists in Microsoft Edge (Chromium-based) stemming from improper input validation in the Feedback extension. The issue could allow an attacker to write files to arbitrary locations and gain elevated privileges. Affected product: Mic...

CVE-2016-7241

CVE-2016-7241 concerns memory corruption in Microsoft Internet Explorer 11 and Microsoft Edge triggered by visiting a crafted website, leading to remote code execution or memory corruption-induced denial of service. The issue is attributed to memory corruption in the browser’s handling of certain...

CVE-2017-11766

CVE-2017-11766: Microsoft Edge on Windows 10 (Gold/1511/1607/1703) and Windows Server 2016 has a memory handling flaw in Edge that can be exploited to execute arbitrary code in the context of the current user. The underlying root cause is Edge accessing/handling objects in memory in a way that ca...

CVE-2017-11836

Technical details for CVE-2017-11836 are not publicly available in the provided documents. Monitor for updates from ChakraCore/Microsoft advisories and related CVEs for disclosure status and fixes.

CVE-2017-11911

Technical details about CVE-2017-11911 are not publicly available in the provided documents. Connected sources reference other CVEs (e.g., CVE-2017-11930) and do not expose affected product/version or remediation for this CVE.

CVE-2017-8601

A remote code execution vulnerability exists in the Microsoft Edge browser (and other Microsoft browsers) due to a memory corruption flaw in the JavaScript engine (specifically the Chakra engine). The issue occurs when the engine handles objects in memory, potentially allowing an attacker to exec...

CVE-2018-0930

CVE-2018-0930: ChakraCore and Microsoft Edge on Windows 10 are affected by a memory-handling flaw in the Chakra scripting engine that can enable remote code execution. Affected products include ChakraCore and Edge on Windows 10 releases such as 1709 (and 1703 per related advisories). The descript...

CVE-2018-8145

The CVE-2018-8145 entry describes an information-disclosure vulnerability in the Chakra Scripting Engine memory handling, affecting ChakraCore, Internet Explorer 11, Microsoft Edge, and IE10. The root cause is improper disclosure of memory contents, enabling an attacker to obtain sensitive data t...

CVE-2019-0806

CVE-2019-0806 is a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge, caused by how the engine handles objects in memory (memory corruption). The entry provides CVSS v3.0: HIGH, 7.5 base score (NETWORK attack vector, HIGH attack complexity, NONE privileges,...

CVE-2019-0926

This CVE concerns Microsoft Edge Memory Corruption: a remote code execution vulnerability when Edge improperly accesses objects in memory. The vulnerability could allow an attacker to run arbitrary code in the context of the current user, potentially gaining full system control if the user is adm...

CVE-2021-38669

CVE-2021-38669 concerns Microsoft Edge (Chromium-based) Tampering Vulnerability. Connected docs indicate Edge

CVE-2016-0158

Microsoft Edge on Windows 10 is affected by CVE-2016-0158, an elevation of privilege vulnerability that bypasses the Same Origin Policy via cross‑domain policy enforcement weaknesses. Connected sources describe Edge failing to properly validate JavaScript and enforce domain restrictions, enabling...

CVE-2016-0192

CVE-2016-0192 affects Microsoft Internet Explorer 9–11 and Microsoft Edge. It is a remote code-execution/memory-corruption vulnerability that could allow an attacker to run arbitrary code on a vulnerable system by convincing a user to visit a crafted website. The root cause involves memory handli...

CVE-2017-0068

The Microsoft Edge browser is affected by an information disclosure vulnerability where remote attackers can obtain sensitive information from process memory by visiting a specially crafted web page. The root cause is attributed to a lack of protection for service data . No specific patch version...

CVE-2017-11918

CVE-2017-11918 is described as a ChakraCore/Edge memory-corruption issue in the scripting engine that could allow an attacker to execute code with the current user’s rights. Connected advisories cite ChakraCore-related RCE vulnerabilities affecting Windows 10 variants and Windows Server 2016, att...

CVE-2017-8606

CVE-2017-8606 is described as a remote code execution vulnerability in Microsoft browsers (JavaScript engine) where memory objects mishandled during rendering could allow code execution in the context of the current user. The initial CVE entry lists multiple Windows versions affected. Connected d...

CVE-2018-0954

CVE-2018-0954 describes a remote code execution vulnerability in the scripting engine’s handling of in-memory objects that affects Microsoft browsers. Affected products include Internet Explorer 9/10/11, Edge, and ChakraCore. Root cause: memory/object handling flaw in the scripting engine leading...

CVE-2018-8367

The base CVE describes a remote code execution in the Chakra engine used by Microsoft Edge and ChakraCore due to memory handling issues. Connected documents corroborate a family of Chakra memory-corruption/RCE vulnerabilities in Edge/ChakraCore and include exploits for related CVEs (CVE-2018-8465...

CVE-2018-8618

CVE-2018-8618 describes a remote code execution VULNERABILITY in the Chakra scripting engine, caused by how it handles objects in memory. The issue affects Microsoft Edge and ChakraCore, with a memory corruption root cause that can enable code execution on affected systems. Connected advisories c...

CVE-2019-0940

CVE-2019-0940 is a remote code‑execution vulnerability in Microsoft browsers caused by improper memory handling (memory buffer/ boundary validation) in Edge/Internet Explorer. The issue enables an attacker to execute arbitrary code by sending crafted content over the network, with user interactio...

CVE-2020-0816

Technical details (affected product/component/versions/root cause/impact/fix) for CVE-2020-0816 are not publicly provided in the connected documents. Monitor for updates in the Red Hat, CNVD, NVD and CVE records as new information arises.

CVE-2016-0193

The Chakra JavaScript engine in Microsoft Edge is susceptible to a memory corruption vulnerability, also known as the "Scripting Engine Memory Corruption Vulnerability." A remote attacker can exploit this flaw by using a specially crafted web site to achieve arbitrary code execution or trigger a ...

CVE-2017-11800

Technical details about CVE-2017-11800 are not publicly available in the provided connected documents. Monitor vendor advisories for updates; current sources discuss related ChakraCore/Edge memory‑corruption issues but do not specify this CVE.

CVE-2018-0763

CVE-2018-0763 and CVE-2018-0839 describe information-disclosure vulnerabilities in Microsoft Edge on Windows 10 versions 1703 and 1709, arising from how Edge handles objects in memory. The affected component is Edge within Windows 10; the root cause is memory object handling leading to disclosure...

CVE-2018-0777

CVE-2018-0777 affects Microsoft Edge on Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016, due to how the Scripting Engine handles objects in memory, enabling arbitrary code execution with the current user context. The vulnerability is tied to Scripting Engine Memory Corruption. C...

CVE-2018-0859

The CVE-2018-0859 entry concerns a remote code execution vulnerability in Microsoft Edge and ChakraCore on Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016, caused by how the scripting engine handles objects in memory (Scripting Engine Memory Corruption). Connected advisories (GH...

CVE-2016-1096

Technical details about CVE-2016-1096 are not provided in the supplied documents; current records only note it as unspecified with unknown impact; monitor for updates.

CVE-2016-1102

CVE-2016-1102 is described as an unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Flash libraries in Internet Explorer 10/11 and Microsoft Edge, with unknown impact and attack vectors. It is noted as a different vulnerability than other CVEs listed in MS16-06...

CVE-2017-11840

CVE-2017-11840 αφορά ChakraCore/Microsoft Edge en Windows 10 (Gold/1511/1607/1703/1709) y Windows Server 2016/Server 1709. El fallo proviene de cómo el motor de scripting maneja objetos en la memoria, generando una corrupción de memoria que posibilita que un atacante obtenga los mismos privilegio...

CVE-2017-8737

CVE-2017-8737 covers a remote-code-execution flaw in the Windows PDF Library affecting Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. The issue arises from how the Windows PDF Library handles in-memory objects, allowing an attacker to exec...

CVE-2018-0770

CVE-2018-0770 is a remote code execution vulnerability in Microsoft Edge's scripting engine memory handling. The CPAI-2018-0134 advisory states a remote unauthenticated attacker could exploit this by enticing a user to open a specially crafted webpage, affecting Edge on Windows 10 releases (Gold,...

CVE-2019-0651

Technical details for CVE-2019-0651 are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2019-0810

Technical details for CVE-2019-0810 are not publicly available in the provided documents. Monitor for updates.

CVE-2021-26439

Summary: CVE-2021-26439 is a Microsoft Edge for Android information disclosure vulnerability. The primary sources consistently describe an information disclosure risk in Edge for Android, but do not provide concrete exploit details in the supplied documents. Affected product (from provided data):...

CVE-2016-1109

CVE-2016-1109 affects Adobe Flash Player 21.0.0.213 and earlier (as used in IE/Edge). The vulnerability is described as a use-after-free issue in Flash handling, potentially allowing remote code execution via a specially crafted SWF file. Connected advisories confirm this as part of the Flash sec...

CVE-2016-3199

The Chakra JavaScript engine in Microsoft Edge is susceptible to a memory corruption vulnerability, also known as the "Scripting Engine Memory Corruption Vulnerability." A remote attacker can exploit this by using a specially crafted web page to trigger an operation that exceeds buffer boundaries...