758 matches found
CVE-2017-0223
CVE-2017-0223 refers to a ChakraCore remote code execution vulnerability in Microsoft’s Chakra Core rendering engine used by Edge. The root cause is memory corruption in the engine when handling in-memory objects, enabling remote code execution via crafted content. Connected advisories (GHSA and ...
CVE-2017-11792
CVE-2017-11792 describes a memory-handling vulnerability in the ChakraCore scripting engine (used by Microsoft Edge) on Windows 10 version 1703 that allows an attacker to execute arbitrary code in the context of the current user. The connected advisories reference ChakraCore RCE/Memory Corruption...
CVE-2017-11862
CVE-2017-11862 affects ChakraCore and Microsoft Edge on Windows 10 version 1709 and Windows Server 1709. The vulnerability is a Scripting Engine Memory Corruption in the in-memory handling of objects, allowing an attacker to gain the same user rights as the current user (privilege escalation). Th...
CVE-2017-11905
CVE-2017-11905 affects ChakraCore and Microsoft Edge on Windows 10 (versions 1511, 1607, 1703, 1709) and Windows Server 2016. The root cause is how the scripting engine handles objects in memory, described as a Scripting Engine Memory Corruption Vulnerability, enabling an attacker to execute arbi...
CVE-2017-8607
CVE-2017-8607 is a remote code execution memory‑corruption vulnerability in Microsoft browsers (JavaScript engine) on Windows. Root cause: memory corruption when rendering objects in memory; affected components include the browser JS engine. Impact: arbitrary code execution in the current user co...
CVE-2017-8636
CVE-2017-8636 affects Microsoft browsers across Windows 7 SP1, Server 2008 R2 SP1, 8.1, RT 8.1, 2012/2012 R2, 10 (Gold, 1511, 1607, 1703) and Server 2016. The issue is a memory corruption in the browser scripting engines when handling objects in memory, allowing remote code execution in the conte...
CVE-2018-0874
CVE-2018-0874 concerns ChakraCore and Microsoft Edge on Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016. The issue is described as remote code execution arising from how the Chakra scripting engine handles objects in memory (Chakra Scripting Engine Memory Corruption). The connec...
CVE-2018-8367
The base CVE describes a remote code execution in the Chakra engine used by Microsoft Edge and ChakraCore due to memory handling issues. Connected documents corroborate a family of Chakra memory-corruption/RCE vulnerabilities in Edge/ChakraCore and include exploits for related CVEs (CVE-2018-8465...
CVE-2016-7198
CVE-2016-7198 affects Microsoft Internet Explorer 9–11 and Microsoft Edge. It enables remote attackers to execute arbitrary code or cause memory corruption via a crafted web site (different from CVE-2016-7195). The entry aligns with browser memory corruption vulnerabilities; remediation is via Mi...
CVE-2017-0012
Technical details about CVE-2017-0012 are not publicly provided in the supplied documents. No affected versions, root cause, or remediation are specified here. Monitor for updates from official sources to obtain concrete technical information.
CVE-2017-8635
CVE-2017-8635 is a memory-corruption vulnerability in Microsoft Edge/Internet Explorer JavaScript engines. The issue arises when rendering objects in memory, allowing remote code execution in the context of the current user. Connected Nessus advisories indicate this CVE was addressed in Microsoft...
CVE-2018-0953
CVE-2018-0953 is a remote code execution vulnerability tied to how the Microsoft Edge scripting engine handles objects in memory, affecting Edge and ChakraCore. The issue is described as a memory-corruption vulnerability in the scripting engine, enabling remote code execution. Exploitation is evi...
CVE-2019-0610
Technical details about CVE-2019-0610 are not publicly provided in the supplied documents. Monitor for updates from official advisories and EUVD entries for any further specifics, remediation or impact information.
CVE-2019-0658
CVE-2019-0658 describes an information-disclosure vulnerability in Microsoft Edge/ChakraCore where memory-objects handling leaks could expose memory contents. The ChakraCore information-disclosure entry (GHSA-wwfw-m54G-GV72) confirms the issue is memory-object related and notes an update to chang...
CVE-2020-1056
CVE-2020-1056: Elevation of Privilege affecting Microsoft Edge. Root cause described as improper enforcement of cross-domain policies, enabling an attacker to access information from one domain and inject it into another domain. The connected Microsoft KB entries reference Edge-related security u...
CVE-2016-3199
The Chakra JavaScript engine in Microsoft Edge is affected by CVE-2016-3199, described as a memory corruption vulnerability triggered by a crafted web site that can lead to remote code execution or a denial of service. Connected advisories (GHSA-VFJW-CRCQ-Q92V and GHSA-538H-6RV2-WMJ3) reference a...
CVE-2017-0136
CVE-2017-0134 is a remote code execution vulnerability in the Microsoft scripting engines used by Microsoft Edge/IE, caused by how objects in memory are handled by the scripting engine. The CPAI-2018-0053 advisory notes an exploit vector where a remote attacker could lure a user to open a special...
CVE-2017-0150
Technical details for CVE-2017-0150 are not provided in the connected documents. The Initial Description offers high‑level impact (memory corruption leading to remote code execution) but no concrete product/version/root-cause specifics are present.
CVE-2017-8748
CVE-2017-8748 is a remote code execution vulnerability in Internet Explorer (and IE components in Edge) caused by how the browser’s JavaScript engines render in-memory objects. The issue affects multiple Windows versions listed in the CVE and is described in the September 2017 IE security updates...
CVE-2018-0766
Microsoft Edge Information Disclosure Vulnerability (CVE-2018-0766) affects Microsoft Edge in Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016. The issue stems from how the Edge PDF Reader handles objects in memory, enabling an attacker to obtain information that could be used to...
CVE-2018-0769
CVE-2018-0770 affects the Microsoft Edge scripting engine on Windows 10 (various builds) and Windows Server 2016, due to memory handling of in-memory objects in the scripting engine, leading to remote code execution in the context of the current user. A remote, unauthenticated attacker could enti...
CVE-2018-0934
Summary of the provided sources: A ChakraCore memory corruption issue in the Chakra scripting engine leads to remote code execution on Windows platforms. The connected advisories identify ChakraCore and various Windows builds (notably Windows 10 versions Gold, 1511, 1607, 1703, 1709, and Windows ...
CVE-2018-8452
CVE-2018-8452 is an information disclosure vulnerability reported in the scripting engine used by Microsoft browsers. The affected components cited in connected documents are ChakraCore, Internet Explorer 11, and Microsoft Edge, with the root cause described as improper handling of objects in mem...
CVE-2019-1001
Technical details about CVE-2019-1001 are not provided in the connected documents. No specifics on affected products, versions, or fixes are available here; monitor for updates to reveal concrete technical information.
CVE-2021-38642
Technical details about CVE-2021-38642 (affected versions, root cause, exploitability) are not publicly disclosed in the provided documents. Monitor for updates from Microsoft advisories and CVE records.
CVE-2016-3203
CVE-2016-3203 is a Windows PDF Remote Code Execution vulnerability affecting Windows 8.1, Windows Server 2012 R2/2012, Windows 10 (Gold and 1511) and Microsoft Edge. Connected advisories describe an out-of-bounds memory access in the Windows PDF Library/Edge PDF reader caused by improper buffer v...
CVE-2016-7239
The CVE-2016-7239 entry describes a vulnerability in the RegEx-based XSS filter in Internet Explorer 9–11 and Microsoft Edge that enables remote attackers to conduct XSS and potentially access sensitive information via unspecified vectors. Connected materials (e.g., Seebug PoC) reference a local-...
CVE-2017-0066
CVE-2017-0066 affects Microsoft Edge and is described as a Security Feature Bypass that allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows. The available documents confirm the vulnerability type (Same Origin Policy bypass) and impact category (part...
CVE-2017-0094
CVE-2017-0094 describes a remote code execution in Microsoft scripting engines when handling objects in memory in Microsoft browsers. The connected document CPAI-2018-0053 adds concrete details for CVE-2017-0134: a remote code execution in Microsoft Edge scripting engine due to memory handling of...
CVE-2017-11861
CVE-2017-11861 is an Edge/ChakraCore memory-corruption vulnerability in the Windows scripting engine that could allow remote code execution with the caller’s privileges. Affected products include Microsoft Edge on Windows 10 (versions 1607–1709) and Windows Server 2016/1709 with exploitation tied...
CVE-2017-11870
CVE-2017-11870 affects ChakraCore and Microsoft Edge on Windows 10 (1703/1709) and Windows Server 1709, arising from how the scripting engine handles objects in memory. The vulnerability is described as a memory corruption issue in the scripting engine that can let an attacker execute code with t...
CVE-2017-8592
CVE-2017-8592 is a browser security feature bypass in Microsoft browsers (Internet Explorer/Edge) caused by improper handling of redirect requests. This leads to bypassing CORS redirect restrictions and following redirects that should be ignored, potentially exposing data to an attacker. In the c...
CVE-2017-8619
CVE-2017-8619 refers to a remote code execution vulnerability in the Microsoft Edge scripting engines on Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. The issue arises in how the Scripting Engines render objects in memory, i.e., a memory corruption vulnerability in Edge’s scripting...
CVE-2017-8641
CVE-2017-8641 affects Microsoft Edge/Internet Explorer scripting engines in Windows (memory corruption when rendering objects in memory), enabling remote code execution in the context of the current user. Affected platforms include Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1/RT 8.1, Wi...
CVE-2018-0774
CVE-2018-0774 is a Microsoft Edge scripting engine memory corruption vulnerability in Windows 10 1709 that allows remote code execution in the context of the logged-in user. The issue stems from how the Edge scripting engine handles objects in memory. Connected sightings indicate this CVE was exp...
CVE-2018-0873
CVE-2018-0873 maps to a ChakraCore/Chakra Scripting Engine Memory Corruption vulnerability that allows remote code execution in ChakraCore and Microsoft Edge on affected Windows versions (Windows 10 1511–1709 and Windows Server 2016). The root cause is how the Chakra engine handles in‑memory obje...
CVE-2018-0979
CVE-2018-0979 describes a remote code execution vulnerability in the Chakra scripting engine through memory handling of objects in Microsoft Edge and ChakraCore. The connected advisories (GHSA) reiterate a ChakraCore RCE vulnerability affecting Edge/ChakraCore, aligned with the same memory-corrup...
CVE-2018-1022
CVE-2018-1022 is a remote code execution vulnerability in which the scripting engine mishandles objects in memory. Connected sources indicate this affects ChakraCore, Internet Explorer 11, and Microsoft Edge, with the issue described as a memory corruption vulnerability in the scripting engine. T...
CVE-2018-8139
CVE-2018-8139 is a remote code execution in the scripting engine used by Microsoft Edge and ChakraCore, caused by memory handling when processing objects. Affected: Edge and ChakraCore. Exploitation is evidenced by CIRCL/exploit-db references (e.g., exploit-DB ID 45012). The advisories confirm th...
CVE-2018-8178
Technical details, affected versions/limitations, and remediation for CVE-2018-8178 are not provided in the supplied documents. Monitor for updates from official advisories.
CVE-2021-38669
CVE-2021-38669 concerns Microsoft Edge (Chromium-based) Tampering Vulnerability. Connected docs indicate Edge
CVE-2016-1105
CVE-2016-1105 is a type confusion vulnerability in Adobe Flash Player (affecting 21.0.0.213 and earlier, as used in IE10/11 and Edge). The root cause is a type confusion issue in handling SWF resources, which can lead to arbitrary code execution . Public advisories (APSB16-15) and multiple vendor...
CVE-2016-1107
CVE-2016-1107 is a use-after-free vulnerability in Adobe Flash Player (affected: 21.0.0.213 and earlier, in Flash libraries used by IE10/11 and Edge). Root cause: use-after-free when handling certain SWF content, enabling potential arbitrary code execution. Impact is described as code execution o...
CVE-2017-0011
Technical details for CVE-2017-0011 are not provided in the supplied documents; no affected product/version or remediation specifics are specified. Monitor for updates.
CVE-2017-0151
Technical details for CVE-2017-0151 are not publicly available in the provided Connected documents. No affected products, root cause, or remediation are specified here. Monitor for updates from newer advisories or the NVD entry.
CVE-2017-11809
CVE-2017-11809 affects ChakraCore and Microsoft Edge on Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. The issue is a memory-handling vulnerability in the scripting engine that can allow arbitrary code execution in the context of the current user. There are public exploit references...
CVE-2017-11833
CVE-2017-11833 affects Microsoft Edge in Windows 10 versions (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016/1709. The vulnerability arises from Edge’s handling of cross-origin requests, enabling an attacker to determine the origin of all webpages loaded in the affected browser, i.e., an i...
CVE-2018-0763
CVE-2018-0763 and CVE-2018-0839 describe information-disclosure vulnerabilities in Microsoft Edge on Windows 10 versions 1703 and 1709, arising from how Edge handles objects in memory. The affected component is Edge within Windows 10; the root cause is memory object handling leading to disclosure...
CVE-2018-0837
CVE-2018-0837 corresponds to a remote code execution vulnerability in Microsoft Edge and ChakraCore on Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016, arising from how the scripting engine handles objects in memory (Scripting Engine Memory Corruption Vulnerability). Connected a...