CVE-2019-1356

CVE-2019-1356 is an information-disclosure vulnerability in Microsoft Edge based on EdgeHTML, caused by improper handling of memory objects. It can be exploited over a network with low attack complexity and no user interaction required per the CVSS data (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N; base ...

CVE-2016-7287

CVE-2016-7287 is a memory-corruption vulnerability in the scripting engines of Internet Explorer 11 and Microsoft Edge, exploitable via a crafted web site that can lead to remote code execution or memory corruption-based denial of service. Public references confirm exploitation (Exploit-DB entry ...

CVE-2017-0010

The connected advisory CPAI-2018-0053 confirms CVE-2017-0134 as a remote code execution in Microsoft Edge’s scripting engine, caused by memory handling of in-memory objects. The vulnerability involves memory corruption that could allow an attacker to execute arbitrary code with the current user’s...

CVE-2017-0015

Technical details for CVE-2017-0015 are not provided in the supplied documents. No affected product/version, root cause, or fix is specified here. Monitor for updates in the connected materials.

CVE-2017-0069

Technical details about CVE-2017-0069 are not publicly available in the provided documents. Monitor updates from official advisories to obtain affected products, impact, and remediation.

CVE-2017-0070

CVE-2017-0134 (Microsoft Edge Scripting Engine) is a remote code execution vulnerability caused by memory corruption when handling objects in memory in the scripting engine. The issue allows a remote attacker to entice a user to open a crafted page, potentially gaining the same user rights as the...

CVE-2017-11796

Summary: CVE-2017-11796 pertains to ChakraCore and Microsoft Edge on Windows 10 1703, involving a memory corruption issue in the scripting engine that handles in-memory objects. Affected components: ChakraCore scripting engine; Windows 10 1703 with Microsoft Edge. Root cause: Memory corruption wi...

CVE-2017-11821

Summary: CVE-2017-11821 is part of ChakraCore/Edge-related memory corruption vulnerabilities. The connected advisories describe a vulnerability in the ChakraCore scripting engine where how in-memory objects are handled can allow an attacker to execute arbitrary code in the context of the current ...

CVE-2017-11838

CVE-2017-11838 affects ChakraCore and Microsoft Edge in Windows environments (various versions listed in the initial entry). The vulnerability arises from how the scripting engine handles objects in memory, leading to memory corruption that could allow an attacker to execute code with the same us...

CVE-2017-11866

CVE-2017-11866 concerns ChakraCore/Edge on Windows 10 (various editions) where the scripting engine’s memory handling in objects can be abused to execute code with the caller’s privileges. The root cause is memory corruption within the scripting engine, enabling privilege escalation. Connected ad...

CVE-2017-11919

CVE-2017-11919 affects ChakraCore and Internet Explorer in multiple Windows versions (Windows 7 SP1, Server 2008 R2 SP1, 8.1/RT 8.1, 2012 R2, 10 (various builds), and Edge). Root cause: vulnerability in the scripting engine due to how it handles objects in memory, leading to information disclosur...

CVE-2018-0860

CVE-2018-0860 involves Microsoft Edge and ChakraCore on Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016. The root cause is a memory handling issue in the ChakraCore scripting engine that can lead to remote code execution when objects in memory are mishandled. The CVE is tied to ...

CVE-2018-0871

CVE-2018-0871 refers to an information-disclosure vulnerability in Microsoft Edge where the browser improperly marks or handles files/objects in memory, enabling potential leakage of sensitive information. The connected sources corroborate that this issue is specific to Edge and is distinct from ...

CVE-2018-0936

CVE-2018-0936 relates to a ChakraCore memory corruption vulnerability that enables remote code execution on Windows 10 (notably 1709) due to how the Chakra scripting engine handles in-memory objects. The connected advisories confirm ChakraCore RCE across Windows 10 versions (including 1703/1709) ...

CVE-2016-3386

CVE-2016-3386 affects the Chakra JavaScript engine (ChakraCore) used by Microsoft Edge. The connected advisories reaffirm a remote code execution/denial-of-service vulnerability due to memory corruption triggered by a crafted web site. The issue is documented across multiple sources (GHSA advisor...

CVE-2017-0266

CVE-2017-0266 maps to a Microsoft Edge remote code execution vulnerability. The issue arises from the scripting engine’s handling of in‑memory objects, enabling an attacker to execute arbitrary code in the context of the current user if a user visits a crafted page. The vulnerability affects Micr...

CVE-2017-11839

CVE-2017-11839 is a Microsoft Edge scripting engine memory corruption vulnerability affecting Windows 10 (Gold/1511/1607/1703/1709) and Windows Server 2016/1709. The root cause is memory handling of objects in the scripting engine, leading to remote code execution when a user visits a crafted pag...

CVE-2017-11908

CVE-2017-11908 affects ChakraCore with Windows 10 (1709) where the scripting engine’s in-memory object handling causes memory corruption. This can allow an attacker to execute arbitrary code in the context of the current user (high impact). The provided connected advisories describe multiple vari...

CVE-2017-8647

Technical details for CVE-2017-8647 are not publicly available in the provided connected documents. Monitor for updates from vendors/security advisories; no product/version/impact is specified in the supplied materials.

CVE-2018-0767

CVE-2018-0767 affects Microsoft Edge on Windows 10 (versions 1511, 1607, 1703, 1709) and Windows Server 2016. The vulnerability stems from how the Scripting Engine handles objects in memory , enabling an attacker to perform an information-disclosure attack. Public references describe it as the Ed...

CVE-2018-0775

CVE-2018-0775 affects Microsoft Edge's scripting engine on Windows 10 1709. The CVE stems from memory handling in the scripting engine, enabling remote code execution in the context of the current user when a target opens a specially crafted web page. Exploitation is evidenced by exploit-db entri...

CVE-2019-0607

Technical details about CVE-2019-0607 are not publicly provided in the supplied connected documents; no product/version/impact details are present. Monitor for updates.

CVE-2019-0812

Technical details about CVE-2019-0812 are not publicly available in the provided documents. Monitor for updates from vendors or security advisories.

CVE-2019-0833

CVE-2019-0833 is a Microsoft Edge information-disclosure vulnerability caused by improper handling of objects in memory (Edge HTML variant). The issue could allow an attacker to obtain sensitive information from affected Edge components. Public references identify Edge as the affected component a...

CVE-2020-1037

CVE-2020-1037 is a ChakraCore/Edge remote code execution vulnerability. The Chakra scripting engine mishandles in-memory objects, enabling an attacker to execute arbitrary code in the context of the user. Public sources (GHSA-8XV4-C7RQ-J577, NVD entry) describe it as a ChakraCore/Edge RCE without...

CVE-2015-2441

CVE-2015-2441 affects Microsoft Internet Explorer (IE) 7–11 and Edge, enabling remote code execution or memory corruption via a crafted web site. The vulnerability is associated with memory corruption in IE/Edge components (root cause described as memory corruption; exploitable via crafted pages)...

CVE-2016-1098

Technical details for CVE-2016-1098 are not publicly available in the provided documents. Monitor for updates; based on current sources, specifics on affected components, impact, or fixes are not disclosed here.

CVE-2017-0140

Technical details for CVE-2017-0140 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2017-0240

CVE-2017-0240 is a remote code execution issue in Microsoft Edge arising from how the Microsoft scripting engine renders objects in memory. The vulnerability affects the Edge scripting engine component and could allow code execution in the context of the current user. Microsoft released security ...

CVE-2017-11806

CVE-2017-11806 affects ChakraCore and Microsoft Edge in Windows 10 version 1703, where the scripting engine’s in-memory object handling can lead to memory corruption and arbitrary code execution in the current user context. The vulnerability is described as a memory corruption flaw in ChakraCore’...

CVE-2017-8496

Microsoft Edge in Windows 10 1607 and Windows Server 2016 is affected by CVE-2017-8496/8497, a remote memory corruption vulnerability caused by improper handling of memory objects in Edge. Exploitation could allow arbitrary code execution in the context of the current user, potentially with the u...

CVE-2017-8605

CVE-2017-8605 is described across connected sources as a memory-corruption vulnerability in Microsoft Edge’s scripting engine that can lead to arbitrary code execution in the context of the current user when handling objects in memory. Public references link this family of issues to Edge on Windo...

CVE-2017-8646

CVE-2017-8646 concerns a remote code execution vulnerability in Microsoft Edge’s scripting engine memory handling. Affected product/variant: Microsoft Edge on Windows 10 (versions 1511, 1607, 1703) and Windows Server 2016, where the JavaScript engine could corrupt memory while rendering objects i...

CVE-2018-0768

CVE-2018-0768 corresponds to a memory corruption vulnerability in the Microsoft Edge scripting engine on Windows 10 (1709) that allows a remote attacker to execute arbitrary code in the context of the current user by convincing a user to open a crafted page. Connected advisories confirm a remote ...

CVE-2018-0776

CVE-2018-0776 affects Microsoft Edge scripting engine memory handling in Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016, enabling code execution in the context of the current user. Connected sources indicate exploitation: CIRCL sightings list the CVE-2018-0776 exploit (exploit-...

CVE-2018-0946

CVE-2018-0946 describes a remote code execution vulnerability in the scripting engine memory handling, affecting Microsoft Edge and ChakraCore. The connected sources corroborate an RCE in the scripting engine (memory corruption). Exploitation is evidenced by exploit-db entries (e.g., 44758). The ...

CVE-2019-0641

CVE-2019-0641 is a security feature bypass in Microsoft Edge related to how Edge handles whitelisting. The vulnerability could allow bypassing certain security policies by abusing the whitelisting mechanism in Edge. Connected sources corroborate the issue as a Microsoft Edge security feature bypa...

CVE-2019-0780

Technical details about CVE-2019-0780 (affected products, payload, root cause, and remediation) are not publicly available in the provided connected documents. Monitor for updates from NVD/MSRC and OSV/OpenVAS entries for concrete information.

CVE-2016-1110

CVE-2016-1110 is a use-after-free vulnerability in Adobe Flash Player 21.0.0.213 and earlier, affecting Flash libraries used by Microsoft Internet Explorer 10/11 and Microsoft Edge. The CVE description notes unknown impact/vectors, but related advisories and vendor bulletins list this family of i...

CVE-2016-3370

CVE-2016-3370 corresponds to a PDF library information-disclosure vulnerability in Microsoft Edge on Windows 8.1, Windows Server 2012 R2/2012, Windows RT 8.1, and Windows 10 versions (1511, 1607). The issue allows remote attackers to obtain sensitive information via a crafted web site or content,...

CVE-2017-0093

CVE-2017-0093 is a Microsoft Edge vulnerability described as a memory-corruption/type-confusion issue in the Edge Scripting Engine when handling objects in memory, specifically related to asm.js handling. The root cause is a type-confusion in the scripting engine caused by improper parsing of eva...

CVE-2017-0138

CVE-2017-0134 is described in a connected advisory as a remote code execution vulnerability in the Microsoft Edge scripting engine, caused by how it handles objects in memory. The advisory states that a remote, unauthenticated attacker could exploit this by enticing the target user to open a spec...

CVE-2017-8608

CVE-2017-8608 is described as a remote code execution vulnerability in the Microsoft browser JavaScript engine, caused by memory corruption when handling objects in memory. Affected products include Microsoft browsers on Windows platforms (Internet Explorer/Edge components inside Windows 7/8/10 f...

CVE-2017-8729

CVE-2017-8729 affects Microsoft Edge on Windows 10 version 1703. It is caused by the scripting engine’s handling of in-memory objects, leading to memory corruption and the ability for an attacker to execute arbitrary code in the current user context. The provided documents confirm the vulnerabili...

CVE-2017-8755

CVE-2017-8755 is a memory corruption vulnerability in the Microsoft Edge scripting engine on Windows 10 (versions 1511, 1607, 1703) and Windows Server 2016. An attacker could execute arbitrary code in the context of the current user by abusing how Edge handles objects in memory. The NVD metrics l...

CVE-2018-0930

CVE-2018-0930: ChakraCore and Microsoft Edge on Windows 10 are affected by a memory-handling flaw in the Chakra scripting engine that can enable remote code execution. Affected products include ChakraCore and Edge on Windows 10 releases such as 1709 (and 1703 per related advisories). The descript...

CVE-2018-0990

Mode C: CVE-2018-0990 is a ChakraCore/Edge remote code execution vulnerability described as memory corruption in the Chakra scripting engine when handling objects in memory. Affected products include Microsoft Edge and ChakraCore. The root cause is in the engine’s memory handling, enabling arbitr...

CVE-2018-8551

CVE-2018-8551 is a remote code execution vulnerability in the Chakra scripting engine due to memory handling in ChakraCore/Edge. The issue affects Microsoft Edge and ChakraCore; exploitation requires network access with user interaction. The CVSS data from the entry indicates high impact to confi...

CVE-2019-1038

CVE-2019-1038 is a remote code execution vulnerability in Microsoft browsers where memory can be corrupted while handling objects, allowing arbitrary code execution in the caller’s context. Exploitation could occur when a user visits a malicious website or a compromised site hosting crafted conte...

CVE-2020-1096

CVE-2020-1096: Microsoft Edge PDF Reader remote code execution vulnerability. It arises when Edge PDF Reader improperly handles objects in memory, allowing an attacker to run arbitrary code in the current user’s context via specially crafted PDF content. The vulnerability could grant the attacker...