CVE-2017-0230

CVE-2017-0230 describes a remote code execution vulnerability in Microsoft Edge related to the Scripting Engine Memory Corruption Vulnerability. Connected sources map the issue to the ChakraCore/Edge JavaScript engine, where memory handling when rendering objects can lead to arbitrary code execut...

CVE-2017-11840

CVE-2017-11840 αφορά ChakraCore/Microsoft Edge en Windows 10 (Gold/1511/1607/1703/1709) y Windows Server 2016/Server 1709. El fallo proviene de cómo el motor de scripting maneja objetos en la memoria, generando una corrupción de memoria que posibilita que un atacante obtenga los mismos privilegio...

CVE-2018-0768

CVE-2018-0768 corresponds to a memory corruption vulnerability in the Microsoft Edge scripting engine on Windows 10 (1709) that allows a remote attacker to execute arbitrary code in the context of the current user by convincing a user to open a crafted page. Connected advisories confirm a remote ...

CVE-2018-0770

CVE-2018-0770 is a remote code execution vulnerability in Microsoft Edge's scripting engine memory handling. The CPAI-2018-0134 advisory states a remote unauthenticated attacker could exploit this by enticing a user to open a specially crafted webpage, affecting Edge on Windows 10 releases (Gold,...

CVE-2018-0954

CVE-2018-0954 describes a remote code execution vulnerability in the scripting engine’s handling of in-memory objects that affects Microsoft browsers. Affected products include Internet Explorer 9/10/11, Edge, and ChakraCore. Root cause: memory/object handling flaw in the scripting engine leading...

CVE-2019-0593

Technical details about CVE-2019-0593 are not provided in the connected documents. The EUVD entries mention malware but do not specify vulnerability details. Monitor for updates.

CVE-2019-0773

CVE-2019-0773 is a remote code execution vulnerability in Microsoft Edge’s scripting engine (ChakraCore) related to memory handling of objects. Affected component: the Edge scripting engine within ChakraCore. Root cause: memory corruption in the scripting engine can be triggered by crafted object...

CVE-2019-0933

The vulnerability CVE-2019-0933 affects the Chakra scripting engine in Microsoft Edge where objects in memory are mishandled, leading to remote code execution . The root cause is a memory corruption issue within Chakra’s object handling. Impact is described as HIGH with a CVSS v3 base score of 7....

CVE-2016-0158

Microsoft Edge on Windows 10 is affected by CVE-2016-0158, an elevation of privilege vulnerability that bypasses the Same Origin Policy via cross‑domain policy enforcement weaknesses. Connected sources describe Edge failing to properly validate JavaScript and enforce domain restrictions, enabling...

CVE-2017-11766

CVE-2017-11766: Microsoft Edge on Windows 10 (Gold/1511/1607/1703) and Windows Server 2016 has a memory handling flaw in Edge that can be exploited to execute arbitrary code in the context of the current user. The underlying root cause is Edge accessing/handling objects in memory in a way that ca...

CVE-2017-11911

Technical details about CVE-2017-11911 are not publicly available in the provided documents. Connected sources reference other CVEs (e.g., CVE-2017-11930) and do not expose affected product/version or remediation for this CVE.

CVE-2017-11918

CVE-2017-11918 is described as a ChakraCore/Edge memory-corruption issue in the scripting engine that could allow an attacker to execute code with the current user’s rights. Connected advisories cite ChakraCore-related RCE vulnerabilities affecting Windows 10 variants and Windows Server 2016, att...

CVE-2017-8606

CVE-2017-8606 is described as a remote code execution vulnerability in Microsoft browsers (JavaScript engine) where memory objects mishandled during rendering could allow code execution in the context of the current user. The initial CVE entry lists multiple Windows versions affected. Connected d...

CVE-2018-0763

CVE-2018-0763 and CVE-2018-0839 describe information-disclosure vulnerabilities in Microsoft Edge on Windows 10 versions 1703 and 1709, arising from how Edge handles objects in memory. The affected component is Edge within Windows 10; the root cause is memory object handling leading to disclosure...

CVE-2018-0930

CVE-2018-0930: ChakraCore and Microsoft Edge on Windows 10 are affected by a memory-handling flaw in the Chakra scripting engine that can enable remote code execution. Affected products include ChakraCore and Edge on Windows 10 releases such as 1709 (and 1703 per related advisories). The descript...

CVE-2019-0611

CVE-2019-0611 is a remote code execution vulnerability in Microsoft Edge via ChakraCore. The issue arises from how the Chakra scripting engine handles objects in memory, described as a memory corruption vulnerability unique from CVE-2019-0592. Affected components include Microsoft Edge/ChakraCore...

CVE-2019-0806

CVE-2019-0806 is a remote code execution vulnerability in the Chakra scripting engine used by Microsoft Edge, caused by how the engine handles objects in memory (memory corruption). The entry provides CVSS v3.0: HIGH, 7.5 base score (NETWORK attack vector, HIGH attack complexity, NONE privileges,...

CVE-2019-0922

Technical details about CVE-2019-0922 are not publicly available in the provided documents. Monitor for updates from official advisories to determine affected products, impact, and remediation.

CVE-2019-1193

CVE-2019-1193 is a remote code execution vulnerability in Microsoft browsers caused by memory corruption when handling objects in memory. Exploitation requires a user to browse a malicious website or open crafted content; an attacker could gain the user’s privileges and potentially take control o...

CVE-2016-1097

CVE-2016-1097 is a use-after-free vulnerability in Adobe Flash Player (affecting 21.0.0.213 and earlier) that, per connected sources, could lead to arbitrary code execution. Affected platforms include Windows, OS X, and Linux before the indicated patched builds (e.g., Linux before 11.2.202.621 an...

CVE-2016-1109

CVE-2016-1109 affects Adobe Flash Player 21.0.0.213 and earlier (as used in IE/Edge). The vulnerability is described as a use-after-free issue in Flash handling, potentially allowing remote code execution via a specially crafted SWF file. Connected advisories confirm this as part of the Flash sec...

CVE-2016-7241

CVE-2016-7241 concerns memory corruption in Microsoft Internet Explorer 11 and Microsoft Edge triggered by visiting a crafted website, leading to remote code execution or memory corruption-induced denial of service. The issue is attributed to memory corruption in the browser’s handling of certain...

CVE-2017-0067

CVE-2017-0134 is a remote code execution flaw in the Microsoft Edge scripting engine, caused by memory handling issues when rendering objects in memory. The vulnerability could allow an attacker to execute arbitrary code in the context of the current user if the target is enticed to open a specia...

CVE-2017-11800

Technical details about CVE-2017-11800 are not publicly available in the provided connected documents. Monitor vendor advisories for updates; current sources discuss related ChakraCore/Edge memory‑corruption issues but do not specify this CVE.

CVE-2017-8601

CVE-2017-8601 is a vulnerability in the Microsoft Edge Scripting Engine on Windows 10 (Gold/1511/1607/1703) and Windows Server 2016. The root cause is memory handling during rendering of objects in the JavaScript engine, causing memory corruption that could allow an attacker to execute arbitrary ...

CVE-2018-0777

CVE-2018-0777 affects Microsoft Edge on Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016, due to how the Scripting Engine handles objects in memory, enabling arbitrary code execution with the current user context. The vulnerability is tied to Scripting Engine Memory Corruption. C...

CVE-2018-8367

The base CVE describes a remote code execution in the Chakra engine used by Microsoft Edge and ChakraCore due to memory handling issues. Connected documents corroborate a family of Chakra memory-corruption/RCE vulnerabilities in Edge/ChakraCore and include exploits for related CVEs (CVE-2018-8465...

CVE-2018-8452

CVE-2018-8452 is an information disclosure vulnerability reported in the scripting engine used by Microsoft browsers. The affected components cited in connected documents are ChakraCore, Internet Explorer 11, and Microsoft Edge, with the root cause described as improper handling of objects in mem...

CVE-2019-0810

Technical details for CVE-2019-0810 are not publicly available in the provided documents. Monitor for updates.

CVE-2020-0816

Technical details (affected product/component/versions/root cause/impact/fix) for CVE-2020-0816 are not publicly provided in the connected documents. Monitor for updates in the Red Hat, CNVD, NVD and CVE records as new information arises.

CVE-2016-0193

CVE-2016-0193 targets the Chakra JavaScript engine in Microsoft Edge, allowing remote attackers to cause memory corruption via a crafted web site, potentially leading to arbitrary code execution or a denial of service. The vulnerability is part of the Chakra memory-corruption family, with CVSSv3 ...

CVE-2017-11802

CVE-2017-11802 affects ChakraCore and Microsoft Edge on Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. The vulnerability stems from how the Chakra scripting engine handles memory objects, enabling an attacker to execute arbitrary code in the context of the current user. Exploitation...

CVE-2017-11893

CVE-2017-11893 corresponds to a ChakraCore/Edge memory-corruption vulnerability affecting ChakraCore and Microsoft Edge on Windows 10 versions 1511–1709 and Windows Server 2016. The root cause is improper handling of in-memory scripting engine objects, enabling an attacker to execute arbitrary co...

CVE-2017-8640

CVE-2017-8640 is a Microsoft Edge scripting engine memory corruption vulnerability in Windows 10 (Gold/1511/1607/1703) and Windows Server 2016. The issue arises when rendering objects in memory, allowing an attacker to execute arbitrary code in the context of the current user. The connected advis...

CVE-2019-1220

Technical details for CVE-2019-1220 are not publicly available in the provided documents. No explicit affected products, versions, impact, or remediation are provided here. Monitor for updates from official sources.

CVE-2017-11889

Technical details for CVE-2017-11889 are not provided in the supplied documents. Please monitor official advisories and vendor advisories for updates, patches, and exact impact guidance once publicly disclosed.

CVE-2017-11914

CVE-2017-11914 concerns a memory handling issue in the ChakraCore scripting engine used by ChakraCore and Microsoft Edge on Windows 10 (versions 1511, 1607, 1703, 1709) and Windows Server 2016. The root cause is described as how the scripting engine handles objects in memory, leading to a memory ...

CVE-2018-0772

Technical details for CVE-2018-0772 are not provided in the supplied Connected documents. Public details (affected products, exploit specifics, impact, or fixes) are not available here. Monitor for updates and new disclosures.

CVE-2018-0859

The CVE-2018-0859 entry concerns a remote code execution vulnerability in Microsoft Edge and ChakraCore on Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016, caused by how the scripting engine handles objects in memory (Scripting Engine Memory Corruption). Connected advisories (GH...

CVE-2016-0192

CVE-2016-0192 affects Microsoft Internet Explorer 9–11 and Microsoft Edge. It is a remote code-execution/memory-corruption vulnerability that could allow an attacker to run arbitrary code on a vulnerable system by convincing a user to visit a crafted website. The root cause involves memory handli...

CVE-2016-1096

Technical details about CVE-2016-1096 are not provided in the supplied documents; current records only note it as unspecified with unknown impact; monitor for updates.

CVE-2016-1102

CVE-2016-1102 is described as an unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Flash libraries in Internet Explorer 10/11 and Microsoft Edge, with unknown impact and attack vectors. It is noted as a different vulnerability than other CVEs listed in MS16-06...

CVE-2016-3199

The Chakra JavaScript engine in Microsoft Edge is affected by CVE-2016-3199, described as a memory corruption vulnerability triggered by a crafted web site that can lead to remote code execution or a denial of service. Connected advisories (GHSA-VFJW-CRCQ-Q92V and GHSA-538H-6RV2-WMJ3) reference a...

CVE-2017-11811

CVE-2017-11811 affects ChakraCore and Microsoft Edge on Windows 10 (versions 1511, 1607, 1703) and Windows Server 2016. The vulnerability stems from how the Chakra scripting engine handles in-memory objects, enabling an attacker to execute arbitrary code in the context of the current user. The is...

CVE-2017-11841

CVE-2017-11841 : ChakraCore and Microsoft Edge on Windows 10 (versions 1703/1709, earlier 1511–1709, and Windows Server 2016/1709) are affected by a memory-corruption vulnerability in the scripting engine that can allow an attacker to acquire the current user’s privileges. Connected advisories co...

CVE-2017-8656

CVE-2017-8656 is a remote code execution vulnerability in Microsoft Edge (JavaScript engine in Chakra) on Windows 10 1607/1703 and Windows Server 2016. It arises from memory corruption in the browser’s scripting engine when handling objects in memory, specifically linked to improper initializatio...

CVE-2017-8737

CVE-2017-8737 covers a remote-code-execution flaw in the Windows PDF Library affecting Windows 8.1/RT 8.1, Windows Server 2012/R2, Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. The issue arises from how the Windows PDF Library handles in-memory objects, allowing an attacker to exec...

CVE-2019-0651

Technical details for CVE-2019-0651 are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2019-0940

CVE-2019-0940 is a remote code‑execution vulnerability in Microsoft browsers caused by improper memory handling (memory buffer/ boundary validation) in Edge/Internet Explorer. The issue enables an attacker to execute arbitrary code by sending crafted content over the network, with user interactio...

CVE-2021-26439

Summary: CVE-2021-26439 is a Microsoft Edge for Android information disclosure vulnerability. The primary sources consistently describe an information disclosure risk in Edge for Android, but do not provide concrete exploit details in the supplied documents. Affected product (from provided data):...