CVE-2017-11796

Summary: CVE-2017-11796 pertains to ChakraCore and Microsoft Edge on Windows 10 1703, involving a memory corruption issue in the scripting engine that handles in-memory objects. Affected components: ChakraCore scripting engine; Windows 10 1703 with Microsoft Edge. Root cause: Memory corruption wi...

CVE-2017-11838

CVE-2017-11838 affects ChakraCore and Microsoft Edge in Windows environments (various versions listed in the initial entry). The vulnerability arises from how the scripting engine handles objects in memory, leading to memory corruption that could allow an attacker to execute code with the same us...

CVE-2017-11866

CVE-2017-11866 concerns ChakraCore/Edge on Windows 10 (various editions) where the scripting engine’s memory handling in objects can be abused to execute code with the caller’s privileges. The root cause is memory corruption within the scripting engine, enabling privilege escalation. Connected ad...

CVE-2018-0763

CVE-2018-0763 and CVE-2018-0839 describe information-disclosure vulnerabilities in Microsoft Edge on Windows 10 versions 1703 and 1709, arising from how Edge handles objects in memory. The affected component is Edge within Windows 10; the root cause is memory object handling leading to disclosure...

CVE-2018-0837

CVE-2018-0837 corresponds to a remote code execution vulnerability in Microsoft Edge and ChakraCore on Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016, arising from how the scripting engine handles objects in memory (Scripting Engine Memory Corruption Vulnerability). Connected a...

CVE-2018-0871

CVE-2018-0871 refers to an information-disclosure vulnerability in Microsoft Edge where the browser improperly marks or handles files/objects in memory, enabling potential leakage of sensitive information. The connected sources corroborate that this issue is specific to Edge and is distinct from ...

CVE-2019-0644

Technical details for CVE-2019-0644 are not publicly provided in the supplied documents; monitor for updates.

CVE-2026-26133

CVE-2026-26133 involves an AI command injection vulnerability in Microsoft 365 Copilot that can lead to unauthorized disclosure of information over a network. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N) indicates a network-accessible issue with no privileges required but user intera...

CVE-2016-1098

Technical details for CVE-2016-1098 are not publicly available in the provided documents. Monitor for updates; based on current sources, specifics on affected components, impact, or fixes are not disclosed here.

CVE-2017-0010

The connected advisory CPAI-2018-0053 confirms CVE-2017-0134 as a remote code execution in Microsoft Edge’s scripting engine, caused by memory handling of in-memory objects. The vulnerability involves memory corruption that could allow an attacker to execute arbitrary code with the current user’s...

CVE-2017-0015

Technical details for CVE-2017-0015 are not provided in the supplied documents. No affected product/version, root cause, or fix is specified here. Monitor for updates in the connected materials.

CVE-2017-0069

Technical details about CVE-2017-0069 are not publicly available in the provided documents. Monitor updates from official advisories to obtain affected products, impact, and remediation.

CVE-2017-0070

CVE-2017-0134 (Microsoft Edge Scripting Engine) is a remote code execution vulnerability caused by memory corruption when handling objects in memory in the scripting engine. The issue allows a remote attacker to entice a user to open a crafted page, potentially gaining the same user rights as the...

CVE-2017-11821

Summary: CVE-2017-11821 is part of ChakraCore/Edge-related memory corruption vulnerabilities. The connected advisories describe a vulnerability in the ChakraCore scripting engine where how in-memory objects are handled can allow an attacker to execute arbitrary code in the context of the current ...

CVE-2017-11839

CVE-2017-11839 is a Microsoft Edge scripting engine memory corruption vulnerability affecting Windows 10 (Gold/1511/1607/1703/1709) and Windows Server 2016/1709. The root cause is memory handling of objects in the scripting engine, leading to remote code execution when a user visits a crafted pag...

CVE-2018-0860

CVE-2018-0860 involves Microsoft Edge and ChakraCore on Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016. The root cause is a memory handling issue in the ChakraCore scripting engine that can lead to remote code execution when objects in memory are mishandled. The CVE is tied to ...

CVE-2018-0936

CVE-2018-0936 relates to a ChakraCore memory corruption vulnerability that enables remote code execution on Windows 10 (notably 1709) due to how the Chakra scripting engine handles in-memory objects. The connected advisories confirm ChakraCore RCE across Windows 10 versions (including 1703/1709) ...

CVE-2015-2441

CVE-2015-2441 affects Microsoft Internet Explorer (IE) 7–11 and Edge, enabling remote code execution or memory corruption via a crafted web site. The vulnerability is associated with memory corruption in IE/Edge components (root cause described as memory corruption; exploitable via crafted pages)...

CVE-2016-3370

CVE-2016-3370 corresponds to a PDF library information-disclosure vulnerability in Microsoft Edge on Windows 8.1, Windows Server 2012 R2/2012, Windows RT 8.1, and Windows 10 versions (1511, 1607). The issue allows remote attackers to obtain sensitive information via a crafted web site or content,...

CVE-2016-3386

CVE-2016-3386 affects the Chakra JavaScript engine (ChakraCore) used by Microsoft Edge. The connected advisories reaffirm a remote code execution/denial-of-service vulnerability due to memory corruption triggered by a crafted web site. The issue is documented across multiple sources (GHSA advisor...

CVE-2017-0266

CVE-2017-0266 maps to a Microsoft Edge remote code execution vulnerability. The issue arises from the scripting engine’s handling of in‑memory objects, enabling an attacker to execute arbitrary code in the context of the current user if a user visits a crafted page. The vulnerability affects Micr...

CVE-2017-11908

CVE-2017-11908 affects ChakraCore with Windows 10 (1709) where the scripting engine’s in-memory object handling causes memory corruption. This can allow an attacker to execute arbitrary code in the context of the current user (high impact). The provided connected advisories describe multiple vari...

CVE-2017-8646

CVE-2017-8646 concerns a remote code execution vulnerability in Microsoft Edge’s scripting engine memory handling. Affected product/variant: Microsoft Edge on Windows 10 (versions 1511, 1607, 1703) and Windows Server 2016, where the JavaScript engine could corrupt memory while rendering objects i...

CVE-2017-8647

Technical details for CVE-2017-8647 are not publicly available in the provided connected documents. Monitor for updates from vendors/security advisories; no product/version/impact is specified in the supplied materials.

CVE-2018-0767

CVE-2018-0767 affects Microsoft Edge on Windows 10 (versions 1511, 1607, 1703, 1709) and Windows Server 2016. The vulnerability stems from how the Scripting Engine handles objects in memory , enabling an attacker to perform an information-disclosure attack. Public references describe it as the Ed...

CVE-2018-0775

CVE-2018-0775 affects Microsoft Edge's scripting engine on Windows 10 1709. The CVE stems from memory handling in the scripting engine, enabling remote code execution in the context of the current user when a target opens a specially crafted web page. Exploitation is evidenced by exploit-db entri...

CVE-2018-0776

CVE-2018-0776 affects Microsoft Edge scripting engine memory handling in Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016, enabling code execution in the context of the current user. Connected sources indicate exploitation: CIRCL sightings list the CVE-2018-0776 exploit (exploit-...

CVE-2018-8551

CVE-2018-8551 is a remote code execution vulnerability in the Chakra scripting engine due to memory handling in ChakraCore/Edge. The issue affects Microsoft Edge and ChakraCore; exploitation requires network access with user interaction. The CVSS data from the entry indicates high impact to confi...

CVE-2019-0607

Technical details about CVE-2019-0607 are not publicly provided in the supplied connected documents; no product/version/impact details are present. Monitor for updates.

CVE-2019-0812

Technical details about CVE-2019-0812 are not publicly available in the provided documents. Monitor for updates from vendors or security advisories.

CVE-2019-0833

CVE-2019-0833 is a Microsoft Edge information-disclosure vulnerability caused by improper handling of objects in memory (Edge HTML variant). The issue could allow an attacker to obtain sensitive information from affected Edge components. Public references identify Edge as the affected component a...

CVE-2020-1037

CVE-2020-1037 is a ChakraCore/Edge remote code execution vulnerability. The Chakra scripting engine mishandles in-memory objects, enabling an attacker to execute arbitrary code in the context of the user. Public sources (GHSA-8XV4-C7RQ-J577, NVD entry) describe it as a ChakraCore/Edge RCE without...

CVE-2020-17153

CVE-2020-17153 affects Microsoft Edge for Android. The connected sources describe a spoofing vulnerability in Edge for Android, attributed to insufficient input validation in the browser, enabling a remote attacker to spoof the user interface and potentially access protected information. Public d...

CVE-2016-1110

CVE-2016-1110 is a use-after-free vulnerability in Adobe Flash Player 21.0.0.213 and earlier, affecting Flash libraries used by Microsoft Internet Explorer 10/11 and Microsoft Edge. The CVE description notes unknown impact/vectors, but related advisories and vendor bulletins list this family of i...

CVE-2017-0140

Technical details for CVE-2017-0140 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2017-0240

CVE-2017-0240 is a remote code execution issue in Microsoft Edge arising from how the Microsoft scripting engine renders objects in memory. The vulnerability affects the Edge scripting engine component and could allow code execution in the context of the current user. Microsoft released security ...

CVE-2017-11806

CVE-2017-11806 affects ChakraCore and Microsoft Edge in Windows 10 version 1703, where the scripting engine’s in-memory object handling can lead to memory corruption and arbitrary code execution in the current user context. The vulnerability is described as a memory corruption flaw in ChakraCore’...

CVE-2017-8496

Microsoft Edge in Windows 10 1607 and Windows Server 2016 is affected by CVE-2017-8496/8497, a remote memory corruption vulnerability caused by improper handling of memory objects in Edge. Exploitation could allow arbitrary code execution in the context of the current user, potentially with the u...

CVE-2017-8605

CVE-2017-8605 is described across connected sources as a memory-corruption vulnerability in Microsoft Edge’s scripting engine that can lead to arbitrary code execution in the context of the current user when handling objects in memory. Public references link this family of issues to Edge on Windo...

CVE-2017-8729

CVE-2017-8729 affects Microsoft Edge on Windows 10 version 1703. It is caused by the scripting engine’s handling of in-memory objects, leading to memory corruption and the ability for an attacker to execute arbitrary code in the current user context. The provided documents confirm the vulnerabili...

CVE-2018-0768

CVE-2018-0768 corresponds to a memory corruption vulnerability in the Microsoft Edge scripting engine on Windows 10 (1709) that allows a remote attacker to execute arbitrary code in the context of the current user by convincing a user to open a crafted page. Connected advisories confirm a remote ...

CVE-2018-0946

CVE-2018-0946 describes a remote code execution vulnerability in the scripting engine memory handling, affecting Microsoft Edge and ChakraCore. The connected sources corroborate an RCE in the scripting engine (memory corruption). Exploitation is evidenced by exploit-db entries (e.g., 44758). The ...

CVE-2019-0641

CVE-2019-0641 is a security feature bypass in Microsoft Edge related to how Edge handles whitelisting. The vulnerability could allow bypassing certain security policies by abusing the whitelisting mechanism in Edge. Connected sources corroborate the issue as a Microsoft Edge security feature bypa...

CVE-2019-0780

Technical details about CVE-2019-0780 (affected products, payload, root cause, and remediation) are not publicly available in the provided connected documents. Monitor for updates from NVD/MSRC and OSV/OpenVAS entries for concrete information.

CVE-2015-6155

CVE-2015-6155 affects Microsoft Internet Explorer 10/11 and Microsoft Edge. A remote attacker could execute arbitrary code or cause a denial of service via a crafted web site due to memory corruption in browser handling, leading to potential remote code execution. Public advisories MS15-124 (IE) ...

CVE-2016-3247

CVE-2016-3247 affects Microsoft Internet Explorer 11 and Microsoft Edge, allowing remote code execution or memory corruption via a crafted web site. The root cause is memory handling in the browser when loading objects, enabling code execution with the attacker’s privileges. In the wild exploits ...

CVE-2016-3374

The CVE-2016-3374 entry describes an information-disclosure vulnerability in the PDF library used by Microsoft Edge on Windows 8.1, Windows Server 2012 R2/2012, Windows RT 8.1, and Windows 10 (versions 1511 and 1607). The underlying issue allows remote attackers to obtain sensitive information vi...

CVE-2017-0093

CVE-2017-0093 is a Microsoft Edge vulnerability described as a memory-corruption/type-confusion issue in the Edge Scripting Engine when handling objects in memory, specifically related to asm.js handling. The root cause is a type-confusion in the scripting engine caused by improper parsing of eva...

CVE-2017-0138

CVE-2017-0134 is described in a connected advisory as a remote code execution vulnerability in the Microsoft Edge scripting engine, caused by how it handles objects in memory. The advisory states that a remote, unauthenticated attacker could exploit this by enticing the target user to open a spec...

CVE-2017-8608

CVE-2017-8608 is described as a remote code execution vulnerability in the Microsoft browser JavaScript engine, caused by memory corruption when handling objects in memory. Affected products include Microsoft browsers on Windows platforms (Internet Explorer/Edge components inside Windows 7/8/10 f...