CVE-2019-1038

CVE-2019-1038 is a remote code execution vulnerability in Microsoft browsers where memory can be corrupted while handling objects, allowing arbitrary code execution in the caller’s context. Exploitation could occur when a user visits a malicious website or a compromised site hosting crafted conte...

CVE-2020-1096

CVE-2020-1096: Microsoft Edge PDF Reader remote code execution vulnerability. It arises when Edge PDF Reader improperly handles objects in memory, allowing an attacker to run arbitrary code in the current user’s context via specially crafted PDF content. The vulnerability could grant the attacker...

CVE-2020-17153

CVE-2020-17153 affects Microsoft Edge for Android. The connected sources describe a spoofing vulnerability in Edge for Android, attributed to insufficient input validation in the browser, enabling a remote attacker to spoof the user interface and potentially access protected information. Public d...

CVE-2021-36930

Technical details about CVE-2021-36930 (affected software, root cause, impact, and fixes) are not publicly provided in the connected documents. Monitor for updates from authoritative advisories; this corpus references the CVE but does not specify specifics.

CVE-2016-0191

CVE-2016-0191 concerns a memory corruption/remote code execution vulnerability in the Chakra JavaScript engine used by Microsoft Edge. The initial description states that a crafted website can trigger arbitrary code execution or a denial of service, but the connected documents do not supply concr...

CVE-2016-1099

CVE-2016-1099 is described as an unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier used in IE/Edge, with unknown impact and vectors. Connected records (CVE-2016-4160/4161/4162/4163) document Flash Player vulnerabilities on Windows/macOS/Linux that allow arbitrary code executi...

CVE-2016-4109

Technical details for CVE-2016-4109 are not publicly available in the provided documents; no affected product/version, impact or remediation details are specified here. Monitor for updates.

CVE-2017-0033

CVE-2017-0033 affects Microsoft Internet Explorer 11 and Microsoft Edge, enabling remote attackers to spoof web content via a crafted web site (the vulnerability is distinct from CVE-2017-0012 and CVE-2017-0069). Based on the connected documents, the exploit surface is network-propagated and leve...

CVE-2017-0131

CVE-2017-0131 describes a remote code execution in Microsoft scripting engines when rendering objects in memory in Microsoft browsers. The root cause is memory corruption during object handling in the scripting engine, allowing an attacker to execute arbitrary code in the context of the current u...

CVE-2017-11807

Technical details for CVE-2017-11807 are not publicly provided in the supplied documents. The connected advisories cover ChakraCore RCE/memory corruption generically but do not specify affected product versions, root cause, or fixes for this CVE. Monitor for updates.

CVE-2017-11812

CVE-2017-11812 is a ChakraCore/Edge memory-corruption vulnerability on Windows 10 (versions 1511, 1607, 1703) and Windows Server 2016. The root cause is in how the Chakra scripting engine handles in-memory objects, enabling an attacker to execute arbitrary code in the context of the current user....

CVE-2017-8736

CVE-2017-8736 is an information-disclosure vulnerability affecting Internet Explorer in Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012 R2, and Internet Explorer/Edge in Windows 10 (Gold and various builds). The root cause, as described in connected Nessus data,...

CVE-2017-8756

CVE-2017-8756 is documented as a Microsoft Edge memory-corruption vulnerability in Windows 10 (variants 1511, 1607, 1703) and Windows Server 2016, caused by how Edge accesses objects in memory, enabling arbitrary code execution in the current user context. The connected Nessus plugin entry 104385...

CVE-2018-0773

Technical details for CVE-2018-0773 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation details are included. Monitor for updates.

CVE-2018-8457

Technical details about CVE-2018-8457 are not provided in the connected documents; the initial description is high-level. Monitor for updates.

CVE-2018-8555

Technical details for CVE-2018-8555 are not publicly available in the provided documents. Monitor for updates and follow the disclosure pages for concrete affected components, root cause, and fixes.

CVE-2018-8588

Technical details for CVE-2018-8588 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2018-8624

The entries describe CVE-2018-8624 as a remote code execution vulnerability in the Chakra scripting engine’s memory handling, affecting Microsoft Edge and ChakraCore. The root cause is memory corruption of in-memory objects; the vulnerability is exploitable remotely with network access and requir...

CVE-2020-1242

CVE-2020-1242 is an information-disclosure issue in Microsoft Edge where cross-origin requests are mishandled, enabling an attacker to determine the origin of pages viewed in the affected browser (Edge information leakage). CNVD-2020-61592 documents this vulnerability and OpenVAS KBs reference it...

CVE-2026-26133

CVE-2026-26133 involves an AI command injection vulnerability in Microsoft 365 Copilot that can lead to unauthorized disclosure of information over a network. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:N) indicates a network-accessible issue with no privileges required but user intera...

CVE-2016-0109

CVE-2016-0109 affects Microsoft Internet Explorer 11 and Microsoft Edge. The weakness is memory corruption that can be triggered by a crafted web site, allowing remote code execution or a denial of service. Affected products are IE11 and Edge, with root cause described as improper handling of mem...

CVE-2016-3260

The CVE-2016-3260 issue affects Microsoft’s scripting engines (JScript 9, VBScript, and Chakra) used by Internet Explorer 11 and Microsoft Edge. A memory corruption flaw in the engines could allow remote code execution or a denial of service when processing a crafted web site, as described in the...

CVE-2016-3273

CVE-2016-3273 is a browser information disclosure vulnerability in the XSS Filter of Microsoft Internet Explorer 9–11 and Microsoft Edge. The root cause is improper restriction of JavaScript by the XSS Filter, allowing remote attackers to obtain sensitive information via a crafted website. The is...

CVE-2016-3374

The CVE-2016-3374 entry describes an information-disclosure vulnerability in the PDF library used by Microsoft Edge on Windows 8.1, Windows Server 2012 R2/2012, Windows RT 8.1, and Windows 10 (versions 1511 and 1607). The underlying issue allows remote attackers to obtain sensitive information vi...

CVE-2016-7199

CVE-2016-7199 affects Microsoft Internet Explorer (IE) versions 9–11 and Microsoft Edge, where a crafted web site can bypass the Same Origin Policy to disclose sensitive window-state information (information-disclosure vulnerability). Root cause is tied to how IE/Edge handle window/state data acr...

CVE-2017-0065

CVE-2017-0065 concerns Microsoft Edge memory disclosure via a crafted web site, described as a remote information-collection vulnerability. Exploitation would allow an attacker to obtain sensitive information from the Edge process memory. The NVD entry lists a CVSSv3 base score of 4.3 (MEDIUM) wi...

CVE-2017-0200

CVE-2017-0200 is a remote code execution vulnerability in Microsoft Edge caused by improper handling of memory objects, enabling an attacker to execute arbitrary code in the context of the current user. Public exploits exist. The CVE is referenced in multiple security entries (MSRC advisory for C...

CVE-2017-11764

CVE-2017-11764 : A type confusion vulnerability in Microsoft Edge’s Chakra JavaScript engine (ParseCatch path) allows memory corruption. Reported as an Edge scripting engine issue that can be exploited by presenting a specially crafted web page, potentially enabling remote code execution in the u...

CVE-2017-11799

CVE-2017-11799 relates to a memory-handling vulnerability in the ChakraCore scripting engine (used by ChakraCore and Microsoft Edge) on Windows 10 and Windows Server 2016/Edge. The description states that an attacker can execute arbitrary code in the context of the current user due to memory hand...

CVE-2017-8653

CVE-2017-8653 is a memory-corruption vulnerability in Microsoft browsers on Windows platforms (several Windows versions listed in the initial entry) that allows remote code execution when the browser improperly accesses objects in memory. The issue is categorized under a browser memory corruption...

CVE-2017-8670

CVE-2017-8670 describes a remote code execution vulnerability in Microsoft Edge on Windows 10 and Windows Server 2016 where the scripting engine memory corruption occurs when handling in-memory objects during rendering. The root cause is a memory corruption flaw in the browser’s JavaScript engine...

CVE-2019-0938

CVE-2019-0938 affects Microsoft Edge and describes an elevation of privilege vulnerability that could allow an attacker to escape the Edge AppContainer sandbox. The NVD entry records a high-severity, client-side network-exploitable issue with a CVSS3 base score of 9.0 (critical) and impact on con...

CVE-2016-0186

CVE-2016-0186 affects the Microsoft Edge Chakra JavaScript Engine. The root cause is improper validation in Array.unshift/Array.shift, leading to memory corruption that can enable remote code execution or memory DoS via a crafted web page. The CVE is discussed alongside other Chakra vulnerabiliti...

CVE-2016-3215

CVE-2016-3215 is the Windows PDF Information Disclosure vulnerability affecting Windows 8.1, Windows Server 2012 (Gold/R2), Windows 10 1511, and Edge. It allows remote attackers to read sensitive data from process memory via a crafted PDF. Connected MSKBs confirm mitigations: MS16-068/KB3163017 u...

CVE-2016-3247

CVE-2016-3247 affects Microsoft Internet Explorer 11 and Microsoft Edge, allowing remote code execution or memory corruption via a crafted web site. The root cause is memory handling in the browser when loading objects, enabling code execution with the attacker’s privileges. In the wild exploits ...

CVE-2016-7196

CVE-2016-7196 affects Microsoft Internet Explorer 10/11 and Microsoft Edge. The vulnerability enables remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Severity is HIGH (CVSS v3: 7.5) with network access, user interaction required....

CVE-2016-7279

CVE-2016-7279 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, enabling remote code execution or memory corruption via a crafted web site. The vulnerability is listed in OpenVAS feeds among Windows browser vulnerabilities (Edge/IE) and is addressed by Microsoft security updates MS16-1...

CVE-2017-8728

CVE-2017-8728 is a Windows PDF Library remote code execution vulnerability affecting Windows 8.1/RT 8.1, Windows Server 2012/2012 R2, Windows 10 (1511–1703) and Windows Server 2016. The issue stems from the Windows PDF Library handling objects in memory, enabling arbitrary code execution in the c...

CVE-2018-0777

CVE-2018-0777 affects Microsoft Edge on Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016, due to how the Scripting Engine handles objects in memory, enabling arbitrary code execution with the current user context. The vulnerability is tied to Scripting Engine Memory Corruption. C...

CVE-2018-0835

Mode C: The connected advisories describe a ChakraCore/Edge remote code execution vulnerability caused by the scripting engine’s handling of in-memory objects (Scripting Engine Memory Corruption Vulnerability). Affected software includes Microsoft Edge and ChakraCore on Windows 10 releases such a...

CVE-2018-0857

ChakraCore/Edge memory-corruption RCE chain is described in the connected advisories: ChakraCore on Microsoft Edge and ChakraCore components within Windows 10 (various builds) is vulnerable when the scripting engine mishandles in-memory objects, enabling remote code execution. The exact affected ...

CVE-2018-8542

CVE-2018-8542 describes a remote code execution vulnerability in the Chakra scripting engine memory handling that affects Microsoft Edge and ChakraCore. The flaw arises from how in-memory objects are processed, enabling arbitrary code execution on vulnerable systems. Exploitation details, affecte...

CVE-2018-8557

CVE-2018-8557 is a remote code execution in the Chakra scripting engine caused by memory corruption when handling objects, affecting Microsoft Edge and ChakraCore. Connected docs confirm the root cause (memory handling in Chakra) and affected components but do not provide versioned details, explo...

CVE-2019-0591

CVE-2019-0591 describes a remote code execution vulnerability in the Microsoft Edge scripting engine, caused by memory handling issues when processing objects. The CVE affects Edge and is rated HIGH on both CVSSv3 (7.5) and CVSSv2 (7.6) with network attack vector, high complexity, no privileges r...

CVE-2019-1192

Technical details for CVE-2019-1192 are not publicly available in the provided documents. Monitor for updates from Microsoft MSRC and NVD.

CVE-2016-0111

CVE-2016-0111 affects Microsoft Internet Explorer 9–11 and Microsoft Edge. It is a memory corruption/remote code execution vulnerability triggered by visiting a crafted site, caused by improper memory handling in the browser. Exploitation existed (e.g., Exploit-DB) and patches were released (MS16...

CVE-2016-1108

CVE-2016-1108 is an Adobe Flash Player vulnerability (affecting 21.0.0.213 and earlier in Flash libraries used by IE/Edge) described as a use-after-free leading to remote code execution. Public writeups and advisories (APSB16-15) attribute exploitation to crafted SWF handling, with patches releas...

CVE-2017-0035

CVE-2017-0134 is described in the connected advisory as a remote code execution vulnerability in Microsoft Edge’s scripting engine, caused by memory handling of objects in memory. The vulnerability could let a remote attacker execute arbitrary code in the context of the current user, with the pot...

CVE-2017-0133

Technical details for CVE-2017-0133 are not present in the connected documents; the initial entry describes a remote code execution in Microsoft scripting engines, but no vendor/version/root-cause specifics are provided here. Monitor for updates.

CVE-2017-11808

CVE-2017-11808 affects ChakraCore (and Microsoft Edge) on Windows 10 versions (Gold/1511/1607/1703) and Windows Server 2016. The root cause is memory handling in the ChakraCore scripting engine, described as a memory corruption/information disclosure vulnerability that could allow an attacker to ...