CVE-2017-0136

CVE-2017-0134 is a remote code execution vulnerability in the Microsoft scripting engines used by Microsoft Edge/IE, caused by how objects in memory are handled by the scripting engine. The CPAI-2018-0053 advisory notes an exploit vector where a remote attacker could lure a user to open a special...

CVE-2017-8635

CVE-2017-8635 is a memory-corruption vulnerability in Microsoft Edge/Internet Explorer JavaScript engines. The issue arises when rendering objects in memory, allowing remote code execution in the context of the current user. Connected Nessus advisories indicate this CVE was addressed in Microsoft...

CVE-2017-8748

CVE-2017-8748 is a remote code execution vulnerability in Internet Explorer (and IE components in Edge) caused by how the browser’s JavaScript engines render in-memory objects. The issue affects multiple Windows versions listed in the CVE and is described in the September 2017 IE security updates...

CVE-2018-0934

Summary of the provided sources: A ChakraCore memory corruption issue in the Chakra scripting engine leads to remote code execution on Windows platforms. The connected advisories identify ChakraCore and various Windows builds (notably Windows 10 versions Gold, 1511, 1607, 1703, 1709, and Windows ...

CVE-2016-1107

CVE-2016-1107 is a use-after-free vulnerability in Adobe Flash Player (affected: 21.0.0.213 and earlier, in Flash libraries used by IE10/11 and Edge). Root cause: use-after-free when handling certain SWF content, enabling potential arbitrary code execution. Impact is described as code execution o...

CVE-2017-0069

Technical details about CVE-2017-0069 are not publicly available in the provided documents. Monitor updates from official advisories to obtain affected products, impact, and remediation.

CVE-2017-0093

CVE-2017-0093 is a Microsoft Edge vulnerability described as a memory-corruption/type-confusion issue in the Edge Scripting Engine when handling objects in memory, specifically related to asm.js handling. The root cause is a type-confusion in the scripting engine caused by improper parsing of eva...

CVE-2017-11809

CVE-2017-11809 affects ChakraCore and Microsoft Edge on Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. The issue is a memory-handling vulnerability in the scripting engine that can allow arbitrary code execution in the context of the current user. There are public exploit references...

CVE-2017-11861

CVE-2017-11861 is an Edge/ChakraCore memory-corruption vulnerability in the Windows scripting engine that could allow remote code execution with the caller’s privileges. Affected products include Microsoft Edge on Windows 10 (versions 1607–1709) and Windows Server 2016/1709 with exploitation tied...

CVE-2017-8619

CVE-2017-8619 refers to a remote code execution vulnerability in the Microsoft Edge scripting engines on Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. The issue arises in how the Scripting Engines render objects in memory, i.e., a memory corruption vulnerability in Edge’s scripting...

CVE-2018-8139

CVE-2018-8139 is a remote code execution in the scripting engine used by Microsoft Edge and ChakraCore, caused by memory handling when processing objects. Affected: Edge and ChakraCore. Exploitation is evidenced by CIRCL/exploit-db references (e.g., exploit-DB ID 45012). The advisories confirm th...

CVE-2018-8178

Technical details, affected versions/limitations, and remediation for CVE-2018-8178 are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2019-0644

Technical details for CVE-2019-0644 are not publicly provided in the supplied documents; monitor for updates.

CVE-2019-0780

Technical details about CVE-2019-0780 (affected products, payload, root cause, and remediation) are not publicly available in the provided connected documents. Monitor for updates from NVD/MSRC and OSV/OpenVAS entries for concrete information.

CVE-2019-1356

CVE-2019-1356 is an information-disclosure vulnerability in Microsoft Edge based on EdgeHTML, caused by improper handling of memory objects. It can be exploited over a network with low attack complexity and no user interaction required per the CVSS data (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N; base ...

CVE-2020-1037

CVE-2020-1037 is a ChakraCore/Edge remote code execution vulnerability. The Chakra scripting engine mishandles in-memory objects, enabling an attacker to execute arbitrary code in the context of the user. Public sources (GHSA-8XV4-C7RQ-J577, NVD entry) describe it as a ChakraCore/Edge RCE without...

CVE-2016-1098

Technical details for CVE-2016-1098 are not publicly available in the provided documents. Monitor for updates; based on current sources, specifics on affected components, impact, or fixes are not disclosed here.

CVE-2016-3203

CVE-2016-3203 is a Windows PDF Remote Code Execution vulnerability affecting Windows 8.1, Windows Server 2012 R2/2012, Windows 10 (Gold and 1511) and Microsoft Edge. Connected advisories describe an out-of-bounds memory access in the Windows PDF Library/Edge PDF reader caused by improper buffer v...

CVE-2017-0015

Technical details for CVE-2017-0015 are not provided in the supplied documents. No affected product/version, root cause, or fix is specified here. Monitor for updates in the connected materials.

CVE-2017-0070

CVE-2017-0134 (Microsoft Edge Scripting Engine) is a remote code execution vulnerability caused by memory corruption when handling objects in memory in the scripting engine. The issue allows a remote attacker to entice a user to open a crafted page, potentially gaining the same user rights as the...

CVE-2017-0140

Technical details for CVE-2017-0140 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2017-11821

Summary: CVE-2017-11821 is part of ChakraCore/Edge-related memory corruption vulnerabilities. The connected advisories describe a vulnerability in the ChakraCore scripting engine where how in-memory objects are handled can allow an attacker to execute arbitrary code in the context of the current ...

CVE-2017-11833

CVE-2017-11833 affects Microsoft Edge in Windows 10 versions (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016/1709. The vulnerability arises from Edge’s handling of cross-origin requests, enabling an attacker to determine the origin of all webpages loaded in the affected browser, i.e., an i...

CVE-2017-11870

CVE-2017-11870 affects ChakraCore and Microsoft Edge on Windows 10 (1703/1709) and Windows Server 1709, arising from how the scripting engine handles objects in memory. The vulnerability is described as a memory corruption issue in the scripting engine that can let an attacker execute code with t...

CVE-2017-8496

Microsoft Edge in Windows 10 1607 and Windows Server 2016 is affected by CVE-2017-8496/8497, a remote memory corruption vulnerability caused by improper handling of memory objects in Edge. Exploitation could allow arbitrary code execution in the context of the current user, potentially with the u...

CVE-2017-8646

CVE-2017-8646 concerns a remote code execution vulnerability in Microsoft Edge’s scripting engine memory handling. Affected product/variant: Microsoft Edge on Windows 10 (versions 1511, 1607, 1703) and Windows Server 2016, where the JavaScript engine could corrupt memory while rendering objects i...

CVE-2018-0871

CVE-2018-0871 refers to an information-disclosure vulnerability in Microsoft Edge where the browser improperly marks or handles files/objects in memory, enabling potential leakage of sensitive information. The connected sources corroborate that this issue is specific to Edge and is distinct from ...

CVE-2018-0979

CVE-2018-0979 describes a remote code execution vulnerability in the Chakra scripting engine through memory handling of objects in Microsoft Edge and ChakraCore. The connected advisories (GHSA) reiterate a ChakraCore RCE vulnerability affecting Edge/ChakraCore, aligned with the same memory-corrup...

CVE-2018-8279

CVE-2018-8279 is a remote code execution vulnerability affecting Microsoft Edge (and ChakraCore) caused by Edge improperly accessing objects in memory. The connected sources confirm the issue, with the description stating memory access errors as the root cause and Edge as affected. A CIRCL sighti...

CVE-2018-8551

CVE-2018-8551 is a remote code execution vulnerability in the Chakra scripting engine due to memory handling in ChakraCore/Edge. The issue affects Microsoft Edge and ChakraCore; exploitation requires network access with user interaction. The CVSS data from the entry indicates high impact to confi...

CVE-2019-0833

CVE-2019-0833 is a Microsoft Edge information-disclosure vulnerability caused by improper handling of objects in memory (Edge HTML variant). The issue could allow an attacker to obtain sensitive information from affected Edge components. Public references identify Edge as the affected component a...

CVE-2017-0011

Technical details for CVE-2017-0011 are not provided in the supplied documents; no affected product/version or remediation specifics are specified. Monitor for updates.

CVE-2017-0150

Technical details for CVE-2017-0150 are not provided in the connected documents. The Initial Description offers high‑level impact (memory corruption leading to remote code execution) but no concrete product/version/root-cause specifics are present.

CVE-2017-11838

CVE-2017-11838 affects ChakraCore and Microsoft Edge in Windows environments (various versions listed in the initial entry). The vulnerability arises from how the scripting engine handles objects in memory, leading to memory corruption that could allow an attacker to execute code with the same us...

CVE-2017-8641

CVE-2017-8641 affects Microsoft Edge/Internet Explorer scripting engines in Windows (memory corruption when rendering objects in memory), enabling remote code execution in the context of the current user. Affected platforms include Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1/RT 8.1, Wi...

CVE-2017-8729

CVE-2017-8729 affects Microsoft Edge on Windows 10 version 1703. It is caused by the scripting engine’s handling of in-memory objects, leading to memory corruption and the ability for an attacker to execute arbitrary code in the current user context. The provided documents confirm the vulnerabili...

CVE-2018-0775

CVE-2018-0775 affects Microsoft Edge's scripting engine on Windows 10 1709. The CVE stems from memory handling in the scripting engine, enabling remote code execution in the context of the current user when a target opens a specially crafted web page. Exploitation is evidenced by exploit-db entri...

CVE-2018-0873

CVE-2018-0873 maps to a ChakraCore/Chakra Scripting Engine Memory Corruption vulnerability that allows remote code execution in ChakraCore and Microsoft Edge on affected Windows versions (Windows 10 1511–1709 and Windows Server 2016). The root cause is how the Chakra engine handles in‑memory obje...

CVE-2019-1038

CVE-2019-1038 is a remote code execution vulnerability in Microsoft browsers where memory can be corrupted while handling objects, allowing arbitrary code execution in the caller’s context. Exploitation could occur when a user visits a malicious website or a compromised site hosting crafted conte...

CVE-2017-0010

The connected advisory CPAI-2018-0053 confirms CVE-2017-0134 as a remote code execution in Microsoft Edge’s scripting engine, caused by memory handling of in-memory objects. The vulnerability involves memory corruption that could allow an attacker to execute arbitrary code with the current user’s...

CVE-2017-0033

CVE-2017-0033 affects Microsoft Internet Explorer 11 and Microsoft Edge, enabling remote attackers to spoof web content via a crafted web site (the vulnerability is distinct from CVE-2017-0012 and CVE-2017-0069). Based on the connected documents, the exploit surface is network-propagated and leve...

CVE-2017-0266

CVE-2017-0266 maps to a Microsoft Edge remote code execution vulnerability. The issue arises from the scripting engine’s handling of in‑memory objects, enabling an attacker to execute arbitrary code in the context of the current user if a user visits a crafted page. The vulnerability affects Micr...

CVE-2017-11839

CVE-2017-11839 is a Microsoft Edge scripting engine memory corruption vulnerability affecting Windows 10 (Gold/1511/1607/1703/1709) and Windows Server 2016/1709. The root cause is memory handling of objects in the scripting engine, leading to remote code execution when a user visits a crafted pag...

CVE-2017-8647

Technical details for CVE-2017-8647 are not publicly available in the provided connected documents. Monitor for updates from vendors/security advisories; no product/version/impact is specified in the supplied materials.

CVE-2018-0946

CVE-2018-0946 describes a remote code execution vulnerability in the scripting engine memory handling, affecting Microsoft Edge and ChakraCore. The connected sources corroborate an RCE in the scripting engine (memory corruption). Exploitation is evidenced by exploit-db entries (e.g., 44758). The ...

CVE-2019-0607

Technical details about CVE-2019-0607 are not publicly provided in the supplied connected documents; no product/version/impact details are present. Monitor for updates.

CVE-2019-0812

Technical details about CVE-2019-0812 are not publicly available in the provided documents. Monitor for updates from vendors or security advisories.

CVE-2021-36930

Technical details about CVE-2021-36930 (affected software, root cause, impact, and fixes) are not publicly provided in the connected documents. Monitor for updates from authoritative advisories; this corpus references the CVE but does not specify specifics.

CVE-2016-1110

CVE-2016-1110 is a use-after-free vulnerability in Adobe Flash Player 21.0.0.213 and earlier, affecting Flash libraries used by Microsoft Internet Explorer 10/11 and Microsoft Edge. The CVE description notes unknown impact/vectors, but related advisories and vendor bulletins list this family of i...

CVE-2016-7199

CVE-2016-7199 affects Microsoft Internet Explorer (IE) versions 9–11 and Microsoft Edge, where a crafted web site can bypass the Same Origin Policy to disclose sensitive window-state information (information-disclosure vulnerability). Root cause is tied to how IE/Edge handle window/state data acr...