758 matches found
CVE-2017-11905
CVE-2017-11905 affects ChakraCore and Microsoft Edge on Windows 10 (versions 1511, 1607, 1703, 1709) and Windows Server 2016. The root cause is how the scripting engine handles objects in memory, described as a Scripting Engine Memory Corruption Vulnerability, enabling an attacker to execute arbi...
CVE-2017-11910
CVE-2017-11910 describes a ChakraCore/Windows memory‑corruption vulnerability in the scripting engine that could allow arbitrary code execution under the current user. Connected advisories consistently frame it as a ChakraCore/Edge issue with memory handling in ChakraCore that enables RCE when pr...
CVE-2018-0874
CVE-2018-0874 concerns ChakraCore and Microsoft Edge on Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016. The issue is described as remote code execution arising from how the Chakra scripting engine handles objects in memory (Chakra Scripting Engine Memory Corruption). The connec...
CVE-2018-8367
The base CVE describes a remote code execution in the Chakra engine used by Microsoft Edge and ChakraCore due to memory handling issues. Connected documents corroborate a family of Chakra memory-corruption/RCE vulnerabilities in Edge/ChakraCore and include exploits for related CVEs (CVE-2018-8465...
CVE-2019-0640
CVE-2019-0640 describes a remote code execution vulnerability in Microsoft Edge’s scripting engine related to memory handling of objects. Affected software is Edge; underlying cause is memory corruption in the scripting engine. Impact per listed metrics is HIGH for confidentiality, integrity, and...
CVE-2020-0812
CVE-2020-0812 describes a remote code execution in the Chakra scripting engine used by Microsoft Edge. The vulnerability stems from how the engine handles objects in memory, leading to memory corruption. The affected component is Chakra memory management within Edge/ChakraCore. Risk details: CVSS...
CVE-2020-16884
CVE-2020-16884 is a memory corruption vulnerability in the Internet Explorer IEToEdge Browser Helper Object (BHO) plugin. The issue arises from how the IEToEdge BHO handles objects in memory, enabling remote code execution if a user visits a crafted website. The attacker could run arbitrary code ...
CVE-2016-1105
CVE-2016-1105 is a type confusion vulnerability in Adobe Flash Player (affecting 21.0.0.213 and earlier, as used in IE10/11 and Edge). The root cause is a type confusion issue in handling SWF resources, which can lead to arbitrary code execution . Public advisories (APSB16-15) and multiple vendor...
CVE-2016-7198
CVE-2016-7198 affects Microsoft Internet Explorer 9–11 and Microsoft Edge. It enables remote attackers to execute arbitrary code or cause memory corruption via a crafted web site (different from CVE-2016-7195). The entry aligns with browser memory corruption vulnerabilities; remediation is via Mi...
CVE-2017-0012
Technical details about CVE-2017-0012 are not publicly provided in the supplied documents. No affected versions, root cause, or remediation are specified here. Monitor for updates from official sources to obtain concrete technical information.
CVE-2017-0066
CVE-2017-0066 affects Microsoft Edge and is described as a Security Feature Bypass that allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows. The available documents confirm the vulnerability type (Same Origin Policy bypass) and impact category (part...
CVE-2017-11862
CVE-2017-11862 affects ChakraCore and Microsoft Edge on Windows 10 version 1709 and Windows Server 1709. The vulnerability is a Scripting Engine Memory Corruption in the in-memory handling of objects, allowing an attacker to gain the same user rights as the current user (privilege escalation). Th...
CVE-2017-8607
CVE-2017-8607 is a remote code execution memory‑corruption vulnerability in Microsoft browsers (JavaScript engine) on Windows. Root cause: memory corruption when rendering objects in memory; affected components include the browser JS engine. Impact: arbitrary code execution in the current user co...
CVE-2018-0934
Summary of the provided sources: A ChakraCore memory corruption issue in the Chakra scripting engine leads to remote code execution on Windows platforms. The connected advisories identify ChakraCore and various Windows builds (notably Windows 10 versions Gold, 1511, 1607, 1703, 1709, and Windows ...
CVE-2018-8452
CVE-2018-8452 is an information disclosure vulnerability reported in the scripting engine used by Microsoft browsers. The affected components cited in connected documents are ChakraCore, Internet Explorer 11, and Microsoft Edge, with the root cause described as improper handling of objects in mem...
CVE-2019-0610
Technical details about CVE-2019-0610 are not publicly provided in the supplied documents. Monitor for updates from official advisories and EUVD entries for any further specifics, remediation or impact information.
CVE-2019-0658
CVE-2019-0658 describes an information-disclosure vulnerability in Microsoft Edge/ChakraCore where memory-objects handling leaks could expose memory contents. The ChakraCore information-disclosure entry (GHSA-wwfw-m54G-GV72) confirms the issue is memory-object related and notes an update to chang...
CVE-2016-3199
The Chakra JavaScript engine in Microsoft Edge is affected by CVE-2016-3199, described as a memory corruption vulnerability triggered by a crafted web site that can lead to remote code execution or a denial of service. Connected advisories (GHSA-VFJW-CRCQ-Q92V and GHSA-538H-6RV2-WMJ3) reference a...
CVE-2017-0094
CVE-2017-0094 describes a remote code execution in Microsoft scripting engines when handling objects in memory in Microsoft browsers. The connected document CPAI-2018-0053 adds concrete details for CVE-2017-0134: a remote code execution in Microsoft Edge scripting engine due to memory handling of...
CVE-2017-0136
CVE-2017-0134 is a remote code execution vulnerability in the Microsoft scripting engines used by Microsoft Edge/IE, caused by how objects in memory are handled by the scripting engine. The CPAI-2018-0053 advisory notes an exploit vector where a remote attacker could lure a user to open a special...
CVE-2017-8592
CVE-2017-8592 is a browser security feature bypass in Microsoft browsers (Internet Explorer/Edge) caused by improper handling of redirect requests. This leads to bypassing CORS redirect restrictions and following redirects that should be ignored, potentially exposing data to an attacker. In the c...
CVE-2018-0769
CVE-2018-0770 affects the Microsoft Edge scripting engine on Windows 10 (various builds) and Windows Server 2016, due to memory handling of in-memory objects in the scripting engine, leading to remote code execution in the context of the current user. A remote, unauthenticated attacker could enti...
CVE-2018-0953
CVE-2018-0953 is a remote code execution vulnerability tied to how the Microsoft Edge scripting engine handles objects in memory, affecting Edge and ChakraCore. The issue is described as a memory-corruption vulnerability in the scripting engine, enabling remote code execution. Exploitation is evi...
CVE-2019-1001
Technical details about CVE-2019-1001 are not provided in the connected documents. No specifics on affected products, versions, or fixes are available here; monitor for updates to reveal concrete technical information.
CVE-2016-7239
The CVE-2016-7239 entry describes a vulnerability in the RegEx-based XSS filter in Internet Explorer 9–11 and Microsoft Edge that enables remote attackers to conduct XSS and potentially access sensitive information via unspecified vectors. Connected materials (e.g., Seebug PoC) reference a local-...
CVE-2017-0069
Technical details about CVE-2017-0069 are not publicly available in the provided documents. Monitor updates from official advisories to obtain affected products, impact, and remediation.
CVE-2017-0150
Technical details for CVE-2017-0150 are not provided in the connected documents. The Initial Description offers high‑level impact (memory corruption leading to remote code execution) but no concrete product/version/root-cause specifics are present.
CVE-2017-11809
CVE-2017-11809 affects ChakraCore and Microsoft Edge on Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. The issue is a memory-handling vulnerability in the scripting engine that can allow arbitrary code execution in the context of the current user. There are public exploit references...
CVE-2017-8635
CVE-2017-8635 is a memory-corruption vulnerability in Microsoft Edge/Internet Explorer JavaScript engines. The issue arises when rendering objects in memory, allowing remote code execution in the context of the current user. Connected Nessus advisories indicate this CVE was addressed in Microsoft...
CVE-2017-8748
CVE-2017-8748 is a remote code execution vulnerability in Internet Explorer (and IE components in Edge) caused by how the browser’s JavaScript engines render in-memory objects. The issue affects multiple Windows versions listed in the CVE and is described in the September 2017 IE security updates...
CVE-2018-0766
Microsoft Edge Information Disclosure Vulnerability (CVE-2018-0766) affects Microsoft Edge in Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016. The issue stems from how the Edge PDF Reader handles objects in memory, enabling an attacker to obtain information that could be used to...
CVE-2018-1022
CVE-2018-1022 is a remote code execution vulnerability in which the scripting engine mishandles objects in memory. Connected sources indicate this affects ChakraCore, Internet Explorer 11, and Microsoft Edge, with the issue described as a memory corruption vulnerability in the scripting engine. T...
CVE-2020-1056
CVE-2020-1056: Elevation of Privilege affecting Microsoft Edge. Root cause described as improper enforcement of cross-domain policies, enabling an attacker to access information from one domain and inject it into another domain. The connected Microsoft KB entries reference Edge-related security u...
CVE-2021-38642
Technical details about CVE-2021-38642 (affected versions, root cause, exploitability) are not publicly disclosed in the provided documents. Monitor for updates from Microsoft advisories and CVE records.
CVE-2021-38669
CVE-2021-38669 concerns Microsoft Edge (Chromium-based) Tampering Vulnerability. Connected docs indicate Edge
CVE-2016-1107
CVE-2016-1107 is a use-after-free vulnerability in Adobe Flash Player (affected: 21.0.0.213 and earlier, in Flash libraries used by IE10/11 and Edge). Root cause: use-after-free when handling certain SWF content, enabling potential arbitrary code execution. Impact is described as code execution o...
CVE-2016-3203
CVE-2016-3203 is a Windows PDF Remote Code Execution vulnerability affecting Windows 8.1, Windows Server 2012 R2/2012, Windows 10 (Gold and 1511) and Microsoft Edge. Connected advisories describe an out-of-bounds memory access in the Windows PDF Library/Edge PDF reader caused by improper buffer v...
CVE-2016-3386
CVE-2016-3386 affects the Chakra JavaScript engine (ChakraCore) used by Microsoft Edge. The connected advisories reaffirm a remote code execution/denial-of-service vulnerability due to memory corruption triggered by a crafted web site. The issue is documented across multiple sources (GHSA advisor...
CVE-2017-11796
Summary: CVE-2017-11796 pertains to ChakraCore and Microsoft Edge on Windows 10 1703, involving a memory corruption issue in the scripting engine that handles in-memory objects. Affected components: ChakraCore scripting engine; Windows 10 1703 with Microsoft Edge. Root cause: Memory corruption wi...
CVE-2017-11833
CVE-2017-11833 affects Microsoft Edge in Windows 10 versions (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016/1709. The vulnerability arises from Edge’s handling of cross-origin requests, enabling an attacker to determine the origin of all webpages loaded in the affected browser, i.e., an i...
CVE-2017-11861
CVE-2017-11861 is an Edge/ChakraCore memory-corruption vulnerability in the Windows scripting engine that could allow remote code execution with the caller’s privileges. Affected products include Microsoft Edge on Windows 10 (versions 1607–1709) and Windows Server 2016/1709 with exploitation tied...
CVE-2017-8619
CVE-2017-8619 refers to a remote code execution vulnerability in the Microsoft Edge scripting engines on Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. The issue arises in how the Scripting Engines render objects in memory, i.e., a memory corruption vulnerability in Edge’s scripting...
CVE-2018-0873
CVE-2018-0873 maps to a ChakraCore/Chakra Scripting Engine Memory Corruption vulnerability that allows remote code execution in ChakraCore and Microsoft Edge on affected Windows versions (Windows 10 1511–1709 and Windows Server 2016). The root cause is how the Chakra engine handles in‑memory obje...
CVE-2018-0979
CVE-2018-0979 describes a remote code execution vulnerability in the Chakra scripting engine through memory handling of objects in Microsoft Edge and ChakraCore. The connected advisories (GHSA) reiterate a ChakraCore RCE vulnerability affecting Edge/ChakraCore, aligned with the same memory-corrup...
CVE-2018-8139
CVE-2018-8139 is a remote code execution in the scripting engine used by Microsoft Edge and ChakraCore, caused by memory handling when processing objects. Affected: Edge and ChakraCore. Exploitation is evidenced by CIRCL/exploit-db references (e.g., exploit-DB ID 45012). The advisories confirm th...
CVE-2018-8178
Technical details, affected versions/limitations, and remediation for CVE-2018-8178 are not provided in the supplied documents. Monitor for updates from official advisories.
CVE-2019-0644
Technical details for CVE-2019-0644 are not publicly provided in the supplied documents; monitor for updates.
CVE-2019-1356
CVE-2019-1356 is an information-disclosure vulnerability in Microsoft Edge based on EdgeHTML, caused by improper handling of memory objects. It can be exploited over a network with low attack complexity and no user interaction required per the CVSS data (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N; base ...
CVE-2016-7287
CVE-2016-7287 is a memory-corruption vulnerability in the scripting engines of Internet Explorer 11 and Microsoft Edge, exploitable via a crafted web site that can lead to remote code execution or memory corruption-based denial of service. Public references confirm exploitation (Exploit-DB entry ...