CVE-2017-8748

CVE-2017-8748 is a remote code execution vulnerability in Internet Explorer (and IE components in Edge) caused by how the browser’s JavaScript engines render in-memory objects. The issue affects multiple Windows versions listed in the CVE and is described in the September 2017 IE security updates...

CVE-2018-0775

CVE-2018-0775 affects Microsoft Edge's scripting engine on Windows 10 1709. The CVE stems from memory handling in the scripting engine, enabling remote code execution in the context of the current user when a target opens a specially crafted web page. Exploitation is evidenced by exploit-db entri...

CVE-2018-0933

CVE-2018-0933 concerns ChakraCore on Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016. The issue is a remote code execution due to how the Chakra scripting engine handles objects in memory (memory corruption). Public disclosures (GHSA advisories) describe ChakraCore RCE affecting...

CVE-2019-0658

CVE-2019-0658 describes an information-disclosure vulnerability in Microsoft Edge/ChakraCore where memory-objects handling leaks could expose memory contents. The ChakraCore information-disclosure entry (GHSA-wwfw-m54G-GV72) confirms the issue is memory-object related and notes an update to chang...

CVE-2021-38642

Technical details about CVE-2021-38642 (affected versions, root cause, exploitability) are not publicly disclosed in the provided documents. Monitor for updates from Microsoft advisories and CVE records.

CVE-2015-2441

CVE-2015-2441 affects Microsoft Internet Explorer (IE) 7–11 and Edge, enabling remote code execution or memory corruption via a crafted web site. The vulnerability is associated with memory corruption in IE/Edge components (root cause described as memory corruption; exploitable via crafted pages)...

CVE-2016-1105

CVE-2016-1105 is a type confusion vulnerability in Adobe Flash Player (affecting 21.0.0.213 and earlier, as used in IE10/11 and Edge). The root cause is a type confusion issue in handling SWF resources, which can lead to arbitrary code execution . Public advisories (APSB16-15) and multiple vendor...

CVE-2016-3203

CVE-2016-3203 is a Windows PDF Remote Code Execution vulnerability affecting Windows 8.1, Windows Server 2012 R2/2012, Windows 10 (Gold and 1511) and Microsoft Edge. Connected advisories describe an out-of-bounds memory access in the Windows PDF Library/Edge PDF reader caused by improper buffer v...

CVE-2016-7198

CVE-2016-7198 affects Microsoft Internet Explorer 9–11 and Microsoft Edge. It enables remote attackers to execute arbitrary code or cause memory corruption via a crafted web site (different from CVE-2016-7195). The entry aligns with browser memory corruption vulnerabilities; remediation is via Mi...

CVE-2017-0137

CVE-2017-0137 is described as a remote code execution vulnerability in the handling of objects in memory by Microsoft scripting engines used by Microsoft browsers. The vulnerability could allow an attacker to execute arbitrary code in the context of the current user with the same user rights; if ...

CVE-2017-0150

Technical details for CVE-2017-0150 are not provided in the connected documents. The Initial Description offers high‑level impact (memory corruption leading to remote code execution) but no concrete product/version/root-cause specifics are present.

CVE-2017-11862

CVE-2017-11862 affects ChakraCore and Microsoft Edge on Windows 10 version 1709 and Windows Server 1709. The vulnerability is a Scripting Engine Memory Corruption in the in-memory handling of objects, allowing an attacker to gain the same user rights as the current user (privilege escalation). Th...

CVE-2017-11870

CVE-2017-11870 affects ChakraCore and Microsoft Edge on Windows 10 (1703/1709) and Windows Server 1709, arising from how the scripting engine handles objects in memory. The vulnerability is described as a memory corruption issue in the scripting engine that can let an attacker execute code with t...

CVE-2018-0946

CVE-2018-0946 describes a remote code execution vulnerability in the scripting engine memory handling, affecting Microsoft Edge and ChakraCore. The connected sources corroborate an RCE in the scripting engine (memory corruption). Exploitation is evidenced by exploit-db entries (e.g., 44758). The ...

CVE-2018-8139

CVE-2018-8139 is a remote code execution in the scripting engine used by Microsoft Edge and ChakraCore, caused by memory handling when processing objects. Affected: Edge and ChakraCore. Exploitation is evidenced by CIRCL/exploit-db references (e.g., exploit-DB ID 45012). The advisories confirm th...

CVE-2018-8178

Technical details, affected versions/limitations, and remediation for CVE-2018-8178 are not provided in the supplied documents. Monitor for updates from official advisories.

CVE-2019-0610

Technical details about CVE-2019-0610 are not publicly provided in the supplied documents. Monitor for updates from official advisories and EUVD entries for any further specifics, remediation or impact information.

CVE-2020-1056

CVE-2020-1056: Elevation of Privilege affecting Microsoft Edge. Root cause described as improper enforcement of cross-domain policies, enabling an attacker to access information from one domain and inject it into another domain. The connected Microsoft KB entries reference Edge-related security u...

CVE-2017-0140

Technical details for CVE-2017-0140 are not publicly provided in the supplied documents; no affected products, root cause, or remediation are specified here. Monitor for updates.

CVE-2017-11838

CVE-2017-11838 affects ChakraCore and Microsoft Edge in Windows environments (various versions listed in the initial entry). The vulnerability arises from how the scripting engine handles objects in memory, leading to memory corruption that could allow an attacker to execute code with the same us...

CVE-2017-11861

CVE-2017-11861 is an Edge/ChakraCore memory-corruption vulnerability in the Windows scripting engine that could allow remote code execution with the caller’s privileges. Affected products include Microsoft Edge on Windows 10 (versions 1607–1709) and Windows Server 2016/1709 with exploitation tied...

CVE-2017-8635

CVE-2017-8635 is a memory-corruption vulnerability in Microsoft Edge/Internet Explorer JavaScript engines. The issue arises when rendering objects in memory, allowing remote code execution in the context of the current user. Connected Nessus advisories indicate this CVE was addressed in Microsoft...

CVE-2019-0644

Technical details for CVE-2019-0644 are not publicly provided in the supplied documents; monitor for updates.

CVE-2017-0094

CVE-2017-0094 describes a remote code execution in Microsoft scripting engines when handling objects in memory in Microsoft browsers. The connected document CPAI-2018-0053 adds concrete details for CVE-2017-0134: a remote code execution in Microsoft Edge scripting engine due to memory handling of...

CVE-2017-11799

CVE-2017-11799 relates to a memory-handling vulnerability in the ChakraCore scripting engine (used by ChakraCore and Microsoft Edge) on Windows 10 and Windows Server 2016/Edge. The description states that an attacker can execute arbitrary code in the context of the current user due to memory hand...

CVE-2017-11809

CVE-2017-11809 affects ChakraCore and Microsoft Edge on Windows 10 (Gold, 1511, 1607, 1703) and Windows Server 2016. The issue is a memory-handling vulnerability in the scripting engine that can allow arbitrary code execution in the context of the current user. There are public exploit references...

CVE-2017-8496

Microsoft Edge in Windows 10 1607 and Windows Server 2016 is affected by CVE-2017-8496/8497, a remote memory corruption vulnerability caused by improper handling of memory objects in Edge. Exploitation could allow arbitrary code execution in the context of the current user, potentially with the u...

CVE-2017-8646

CVE-2017-8646 concerns a remote code execution vulnerability in Microsoft Edge’s scripting engine memory handling. Affected product/variant: Microsoft Edge on Windows 10 (versions 1511, 1607, 1703) and Windows Server 2016, where the JavaScript engine could corrupt memory while rendering objects i...

CVE-2018-0871

CVE-2018-0871 refers to an information-disclosure vulnerability in Microsoft Edge where the browser improperly marks or handles files/objects in memory, enabling potential leakage of sensitive information. The connected sources corroborate that this issue is specific to Edge and is distinct from ...

CVE-2018-0953

A remote code execution vulnerability exists in Microsoft Edge and ChakraCore due to the way the scripting engine handles objects in memory. Specifically, the ChakraCore JavaScript script handler is susceptible to an operation that goes beyond buffer boundaries , which can lead to memory corrupti...

CVE-2018-8279

CVE-2018-8279 is a remote code execution vulnerability affecting Microsoft Edge (and ChakraCore) caused by Edge improperly accessing objects in memory. The connected sources confirm the issue, with the description stating memory access errors as the root cause and Edge as affected. A CIRCL sighti...

CVE-2019-0833

CVE-2019-0833 is a Microsoft Edge information-disclosure vulnerability caused by improper handling of objects in memory (Edge HTML variant). The issue could allow an attacker to obtain sensitive information from affected Edge components. Public references identify Edge as the affected component a...

CVE-2019-1356

CVE-2019-1356 is an information-disclosure vulnerability in Microsoft Edge based on EdgeHTML, caused by improper handling of memory objects. It can be exploited over a network with low attack complexity and no user interaction required per the CVSS data (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N; base ...

CVE-2020-1037

CVE-2020-1037 is a ChakraCore/Edge remote code execution vulnerability. The Chakra scripting engine mishandles in-memory objects, enabling an attacker to execute arbitrary code in the context of the user. Public sources (GHSA-8XV4-C7RQ-J577, NVD entry) describe it as a ChakraCore/Edge RCE without...

CVE-2015-6155

CVE-2015-6155 affects Microsoft Internet Explorer 10/11 and Microsoft Edge. A remote attacker could execute arbitrary code or cause a denial of service via a crafted web site due to memory corruption in browser handling, leading to potential remote code execution. Public advisories MS15-124 (IE) ...

CVE-2016-1098

Technical details for CVE-2016-1098 are not publicly available in the provided documents. Monitor for updates; based on current sources, specifics on affected components, impact, or fixes are not disclosed here.

CVE-2016-4109

Technical details for CVE-2016-4109 are not publicly available in the provided documents; no affected product/version, impact or remediation details are specified here. Monitor for updates.

CVE-2017-0011

Technical details for CVE-2017-0011 are not provided in the supplied documents; no affected product/version or remediation specifics are specified. Monitor for updates.

CVE-2017-0015

A remote code execution vulnerability exists in Microsoft browsers due to the way affected Microsoft scripting engines handle and render objects in memory . This memory corruption flaw could allow a remote attacker to execute arbitrary code within the context of the current user. If the user poss...

CVE-2017-0033

CVE-2017-0033 affects Microsoft Internet Explorer 11 and Microsoft Edge, enabling remote attackers to spoof web content via a crafted web site (the vulnerability is distinct from CVE-2017-0012 and CVE-2017-0069). Based on the connected documents, the exploit surface is network-propagated and leve...

CVE-2017-0069

Technical details about CVE-2017-0069 are not publicly available in the provided documents. Monitor updates from official advisories to obtain affected products, impact, and remediation.

CVE-2017-0070

CVE-2017-0134 (Microsoft Edge Scripting Engine) is a remote code execution vulnerability caused by memory corruption when handling objects in memory in the scripting engine. The issue allows a remote attacker to entice a user to open a crafted page, potentially gaining the same user rights as the...

CVE-2017-11833

CVE-2017-11833 affects Microsoft Edge in Windows 10 versions (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016/1709. The vulnerability arises from Edge’s handling of cross-origin requests, enabling an attacker to determine the origin of all webpages loaded in the affected browser, i.e., an i...

CVE-2017-11866

CVE-2017-11866 concerns ChakraCore/Edge on Windows 10 (various editions) where the scripting engine’s memory handling in objects can be abused to execute code with the caller’s privileges. The root cause is memory corruption within the scripting engine, enabling privilege escalation. Connected ad...

CVE-2017-8641

CVE-2017-8641 affects Microsoft Edge/Internet Explorer scripting engines in Windows (memory corruption when rendering objects in memory), enabling remote code execution in the context of the current user. Affected platforms include Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1/RT 8.1, Wi...

CVE-2018-0767

CVE-2018-0767 affects Microsoft Edge on Windows 10 (versions 1511, 1607, 1703, 1709) and Windows Server 2016. The vulnerability stems from how the Scripting Engine handles objects in memory , enabling an attacker to perform an information-disclosure attack. Public references describe it as the Ed...

CVE-2018-0873

CVE-2018-0873 maps to a ChakraCore/Chakra Scripting Engine Memory Corruption vulnerability that allows remote code execution in ChakraCore and Microsoft Edge on affected Windows versions (Windows 10 1511–1709 and Windows Server 2016). The root cause is how the Chakra engine handles in‑memory obje...

CVE-2019-0860

Technical details for CVE-2019-0860 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2016-0186

CVE-2016-0186 affects the Microsoft Edge Chakra JavaScript Engine. The root cause is improper validation in Array.unshift/Array.shift, leading to memory corruption that can enable remote code execution or memory DoS via a crafted web page. The CVE is discussed alongside other Chakra vulnerabiliti...

CVE-2016-1110

CVE-2016-1110 is a use-after-free vulnerability in Adobe Flash Player 21.0.0.213 and earlier, affecting Flash libraries used by Microsoft Internet Explorer 10/11 and Microsoft Edge. The CVE description notes unknown impact/vectors, but related advisories and vendor bulletins list this family of i...