CVE-2025-29796

CVE-2025-29796 affects Microsoft Edge for iOS . The vulnerability is described as a UI misrepresentation that could allow an unauthorized attacker to perform spoofing over a network. According to the initial description, the CVSSv3.1 base score is 4.7 (Medium), with attack vector NETWORK , attack...

CVE-2016-0193

CVE-2016-0193 targets the Chakra JavaScript engine in Microsoft Edge, allowing remote attackers to cause memory corruption via a crafted web site, potentially leading to arbitrary code execution or a denial of service. The vulnerability is part of the Chakra memory-corruption family, with CVSSv3 ...

CVE-2017-0230

CVE-2017-0230 describes a remote code execution vulnerability in Microsoft Edge related to the Scripting Engine Memory Corruption Vulnerability. Connected sources map the issue to the ChakraCore/Edge JavaScript engine, where memory handling when rendering objects can lead to arbitrary code execut...

CVE-2019-0593

Technical details about CVE-2019-0593 are not provided in the connected documents. The EUVD entries mention malware but do not specify vulnerability details. Monitor for updates.

CVE-2019-0926

This CVE concerns Microsoft Edge Memory Corruption: a remote code execution vulnerability when Edge improperly accesses objects in memory. The vulnerability could allow an attacker to run arbitrary code in the context of the current user, potentially gaining full system control if the user is adm...

CVE-2019-0933

The vulnerability CVE-2019-0933 affects the Chakra scripting engine in Microsoft Edge where objects in memory are mishandled, leading to remote code execution . The root cause is a memory corruption issue within Chakra’s object handling. Impact is described as HIGH with a CVSS v3 base score of 7....

CVE-2019-1196

The CVE-2019-1196 issue is a remote code execution vulnerability in Microsoft Edge’s Chakra scripting engine due to memory handling of objects. The impact is execution of arbitrary code in the current user context with potential full system control if the user has admin rights. The conditionally ...

CVE-2016-0158

Microsoft Edge on Windows 10 is affected by CVE-2016-0158, an elevation of privilege vulnerability that bypasses the Same Origin Policy via cross‑domain policy enforcement weaknesses. Connected sources describe Edge failing to properly validate JavaScript and enforce domain restrictions, enabling...

CVE-2017-11766

CVE-2017-11766: Microsoft Edge on Windows 10 (Gold/1511/1607/1703) and Windows Server 2016 has a memory handling flaw in Edge that can be exploited to execute arbitrary code in the context of the current user. The underlying root cause is Edge accessing/handling objects in memory in a way that ca...

CVE-2017-11800

Technical details about CVE-2017-11800 are not publicly available in the provided connected documents. Monitor vendor advisories for updates; current sources discuss related ChakraCore/Edge memory‑corruption issues but do not specify this CVE.

CVE-2017-11893

CVE-2017-11893 corresponds to a ChakraCore/Edge memory-corruption vulnerability affecting ChakraCore and Microsoft Edge on Windows 10 versions 1511–1709 and Windows Server 2016. The root cause is improper handling of in-memory scripting engine objects, enabling an attacker to execute arbitrary co...

CVE-2017-8601

CVE-2017-8601 is a vulnerability in the Microsoft Edge Scripting Engine on Windows 10 (Gold/1511/1607/1703) and Windows Server 2016. The root cause is memory handling during rendering of objects in the JavaScript engine, causing memory corruption that could allow an attacker to execute arbitrary ...

CVE-2018-8618

CVE-2018-8618 describes a remote code execution VULNERABILITY in the Chakra scripting engine, caused by how it handles objects in memory. The issue affects Microsoft Edge and ChakraCore, with a memory corruption root cause that can enable code execution on affected systems. Connected advisories c...

CVE-2020-1433

CVE-2020-1433 affects Microsoft Edge PDF Reader. The vulnerability is caused by the component’s improper handling of in-memory objects, enabling information disclosure. CVSS-3.1 base score 6.5 (Network, Low attack complexity, No privileges required, User interaction required; Confidentiality impa...

CVE-2016-1097

CVE-2016-1097 is a use-after-free vulnerability in Adobe Flash Player (affecting 21.0.0.213 and earlier) that, per connected sources, could lead to arbitrary code execution. Affected platforms include Windows, OS X, and Linux before the indicated patched builds (e.g., Linux before 11.2.202.621 an...

CVE-2017-11802

CVE-2017-11802 affects ChakraCore and Microsoft Edge on Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. The vulnerability stems from how the Chakra scripting engine handles memory objects, enabling an attacker to execute arbitrary code in the context of the current user. Exploitation...

CVE-2017-11914

CVE-2017-11914 concerns a memory handling issue in the ChakraCore scripting engine used by ChakraCore and Microsoft Edge on Windows 10 (versions 1511, 1607, 1703, 1709) and Windows Server 2016. The root cause is described as how the scripting engine handles objects in memory, leading to a memory ...

CVE-2019-1220

Technical details for CVE-2019-1220 are not publicly available in the provided documents. No explicit affected products, versions, impact, or remediation are provided here. Monitor for updates from official sources.

CVE-2016-7241

CVE-2016-7241 concerns memory corruption in Microsoft Internet Explorer 11 and Microsoft Edge triggered by visiting a crafted website, leading to remote code execution or memory corruption-induced denial of service. The issue is attributed to memory corruption in the browser’s handling of certain...

CVE-2017-0067

CVE-2017-0134 is a remote code execution flaw in the Microsoft Edge scripting engine, caused by memory handling issues when rendering objects in memory. The vulnerability could allow an attacker to execute arbitrary code in the context of the current user if the target is enticed to open a specia...

CVE-2018-0772

Technical details for CVE-2018-0772 are not provided in the supplied Connected documents. Public details (affected products, exploit specifics, impact, or fixes) are not available here. Monitor for updates and new disclosures.

CVE-2018-0859

The CVE-2018-0859 entry concerns a remote code execution vulnerability in Microsoft Edge and ChakraCore on Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016, caused by how the scripting engine handles objects in memory (Scripting Engine Memory Corruption). Connected advisories (GH...

CVE-2019-0940

CVE-2019-0940 is a remote code‑execution vulnerability in Microsoft browsers caused by improper memory handling (memory buffer/ boundary validation) in Edge/Internet Explorer. The issue enables an attacker to execute arbitrary code by sending crafted content over the network, with user interactio...

CVE-2016-0192

CVE-2016-0192 affects Microsoft Internet Explorer 9–11 and Microsoft Edge. It is a remote code-execution/memory-corruption vulnerability that could allow an attacker to run arbitrary code on a vulnerable system by convincing a user to visit a crafted website. The root cause involves memory handli...

CVE-2016-1109

CVE-2016-1109 affects Adobe Flash Player 21.0.0.213 and earlier (as used in IE/Edge). The vulnerability is described as a use-after-free issue in Flash handling, potentially allowing remote code execution via a specially crafted SWF file. Connected advisories confirm this as part of the Flash sec...

CVE-2017-11841

CVE-2017-11841 : ChakraCore and Microsoft Edge on Windows 10 (versions 1703/1709, earlier 1511–1709, and Windows Server 2016/1709) are affected by a memory-corruption vulnerability in the scripting engine that can allow an attacker to acquire the current user’s privileges. Connected advisories co...

CVE-2017-8606

CVE-2017-8606 is described as a remote code execution vulnerability in Microsoft browsers (JavaScript engine) where memory objects mishandled during rendering could allow code execution in the context of the current user. The initial CVE entry lists multiple Windows versions affected. Connected d...

CVE-2017-8640

CVE-2017-8640 is a Microsoft Edge scripting engine memory corruption vulnerability in Windows 10 (Gold/1511/1607/1703) and Windows Server 2016. The issue arises when rendering objects in memory, allowing an attacker to execute arbitrary code in the context of the current user. The connected advis...

CVE-2017-8737

CVE-2017-8737 covers a remote-code-execution flaw in the Windows PDF Library affecting Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. The issue arises from how the Windows PDF Library handles in-memory objects, allowing an attacker to exec...

CVE-2018-0780

CVE-2018-0780 concerns Microsoft Edge Scripting Engine Information Disclosure in Windows 10 (various builds) where Edge’s JavaScript engine mishandles in-memory objects, enabling an attacker to obtain information and potentially progress to further compromise. The CVE is linked to Edge scripting ...

CVE-2019-0642

Technical details for CVE-2019-0642 are not publicly available in the provided documents. Monitor for updates from the connected EUVD sources and official advisories before any risk assessment or remediation actions.

CVE-2019-0651

Technical details for CVE-2019-0651 are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2020-0706

Technical details for CVE-2020-0706 are not publicly provided in the connected documents; monitor for updates and rely on the NVD description for a general overview.

CVE-2016-1102

CVE-2016-1102 is described as an unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Flash libraries in Internet Explorer 10/11 and Microsoft Edge, with unknown impact and attack vectors. It is noted as a different vulnerability than other CVEs listed in MS16-06...

CVE-2017-0132

CVE-2017-0134 is described in Connected doc CPAI-2018-0053 as a remote code execution vulnerability in Microsoft Edge’s scripting engine memory handling. The issue arises from how objects are rendered in memory, allowing an attacker to run arbitrary code in the context of the current user by conv...

CVE-2017-0135

CVE-2017-0135 describes a security feature bypass in Microsoft Edge enabling a SOP bypass for HTML elements across browser windows. The core official description notes it is distinct from CVE-2017-0066/0140. A connected article discusses bypassing Edge’s XSS filter/CSP handling, but the provided ...

CVE-2017-11871

CVE-2017-11871: ChakraCore and Microsoft Edge memory-corruption vulnerability in Windows 10 (1703/1709) and Windows Server 1709 allows an attacker to gain the current user’s rights via scripting engine object handling in memory. Root cause: memory handling in the scripting engine leads to memory ...

CVE-2018-0774

CVE-2018-0774 is a Microsoft Edge scripting engine memory corruption vulnerability in Windows 10 1709 that allows remote code execution in the context of the logged-in user. The issue stems from how the Edge scripting engine handles objects in memory. Connected sightings indicate this CVE was exp...

CVE-2018-0980

CVE-2018-0980 describes a remote code execution vulnerability in the Chakra scripting engine’s memory handling, affecting Microsoft Edge and ChakraCore . The root cause is memory corruption when objects are processed in memory, enabling an attacker to execute arbitrary code remotely. The CVSS bas...

CVE-2018-8145

The CVE-2018-8145 entry describes an information-disclosure vulnerability in the Chakra Scripting Engine memory handling, affecting ChakraCore, Internet Explorer 11, Microsoft Edge, and IE10. The root cause is improper disclosure of memory contents, enabling an attacker to obtain sensitive data t...

CVE-2018-8583

CVE-2018-8583 describes a remote code execution vulnerability in the Chakra scripting engine’s handling of objects in memory, affecting Microsoft Edge and ChakraCore. The root cause is memory handling/obj management within Chakra leading to memory corruption that enables code execution. The CVSSv...

CVE-2021-26439

Summary: CVE-2021-26439 is a Microsoft Edge for Android information disclosure vulnerability. The primary sources consistently describe an information disclosure risk in Edge for Android, but do not provide concrete exploit details in the supplied documents. Affected product (from provided data):...

CVE-2017-0137

CVE-2017-0137 is described as a remote code execution vulnerability in the handling of objects in memory by Microsoft scripting engines used by Microsoft browsers. The vulnerability could allow an attacker to execute arbitrary code in the context of the current user with the same user rights; if ...

CVE-2017-11792

CVE-2017-11792 describes a memory-handling vulnerability in the ChakraCore scripting engine (used by Microsoft Edge) on Windows 10 version 1703 that allows an attacker to execute arbitrary code in the context of the current user. The connected advisories reference ChakraCore RCE/Memory Corruption...

CVE-2017-11811

CVE-2017-11811 affects ChakraCore and Microsoft Edge on Windows 10 (versions 1511, 1607, 1703) and Windows Server 2016. The vulnerability stems from how the Chakra scripting engine handles in-memory objects, enabling an attacker to execute arbitrary code in the context of the current user. The is...

CVE-2017-11905

CVE-2017-11905 affects ChakraCore and Microsoft Edge on Windows 10 (versions 1511, 1607, 1703, 1709) and Windows Server 2016. The root cause is how the scripting engine handles objects in memory, described as a Scripting Engine Memory Corruption Vulnerability, enabling an attacker to execute arbi...

CVE-2017-11910

CVE-2017-11910 describes a ChakraCore/Windows memory‑corruption vulnerability in the scripting engine that could allow arbitrary code execution under the current user. Connected advisories consistently frame it as a ChakraCore/Edge issue with memory handling in ChakraCore that enables RCE when pr...

CVE-2017-8636

CVE-2017-8636 affects Microsoft browsers across Windows 7 SP1, Server 2008 R2 SP1, 8.1, RT 8.1, 2012/2012 R2, 10 (Gold, 1511, 1607, 1703) and Server 2016. The issue is a memory corruption in the browser scripting engines when handling objects in memory, allowing remote code execution in the conte...

CVE-2017-8656

CVE-2017-8656 is a remote code execution vulnerability in Microsoft Edge (JavaScript engine in Chakra) on Windows 10 1607/1703 and Windows Server 2016. It arises from memory corruption in the browser’s scripting engine when handling objects in memory, specifically linked to improper initializatio...

CVE-2018-8367

The base CVE describes a remote code execution in the Chakra engine used by Microsoft Edge and ChakraCore due to memory handling issues. Connected documents corroborate a family of Chakra memory-corruption/RCE vulnerabilities in Edge/ChakraCore and include exploits for related CVEs (CVE-2018-8465...