CVE-2016-3247

CVE-2016-3247 affects Microsoft Internet Explorer 11 and Microsoft Edge, allowing remote code execution or memory corruption via a crafted web site. The root cause is memory handling in the browser when loading objects, enabling code execution with the attacker’s privileges. In the wild exploits ...

CVE-2016-3273

CVE-2016-3273 is a browser information disclosure vulnerability in the XSS Filter of Microsoft Internet Explorer 9–11 and Microsoft Edge. The root cause is improper restriction of JavaScript by the XSS Filter, allowing remote attackers to obtain sensitive information via a crafted website. The is...

CVE-2018-0936

CVE-2018-0936 relates to a ChakraCore memory corruption vulnerability that enables remote code execution on Windows 10 (notably 1709) due to how the Chakra scripting engine handles in-memory objects. The connected advisories confirm ChakraCore RCE across Windows 10 versions (including 1703/1709) ...

CVE-2018-0979

CVE-2018-0979 describes a remote code execution vulnerability in the Chakra scripting engine through memory handling of objects in Microsoft Edge and ChakraCore. The connected advisories (GHSA) reiterate a ChakraCore RCE vulnerability affecting Edge/ChakraCore, aligned with the same memory-corrup...

CVE-2018-8551

CVE-2018-8551 is a remote code execution vulnerability in the Chakra scripting engine due to memory handling in ChakraCore/Edge. The issue affects Microsoft Edge and ChakraCore; exploitation requires network access with user interaction. The CVSS data from the entry indicates high impact to confi...

CVE-2019-0607

Technical details about CVE-2019-0607 are not publicly provided in the supplied connected documents; no product/version/impact details are present. Monitor for updates.

CVE-2019-0641

CVE-2019-0641 is a security feature bypass in Microsoft Edge related to how Edge handles whitelisting. The vulnerability could allow bypassing certain security policies by abusing the whitelisting mechanism in Edge. Connected sources corroborate the issue as a Microsoft Edge security feature bypa...

CVE-2016-1099

CVE-2016-1099 is described as an unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier used in IE/Edge, with unknown impact and vectors. Connected records (CVE-2016-4160/4161/4162/4163) document Flash Player vulnerabilities on Windows/macOS/Linux that allow arbitrary code executi...

CVE-2016-3215

CVE-2016-3215 is the Windows PDF Information Disclosure vulnerability affecting Windows 8.1, Windows Server 2012 (Gold/R2), Windows 10 1511, and Edge. It allows remote attackers to read sensitive data from process memory via a crafted PDF. Connected MSKBs confirm mitigations: MS16-068/KB3163017 u...

CVE-2016-7199

CVE-2016-7199 affects Microsoft Internet Explorer (IE) versions 9–11 and Microsoft Edge, where a crafted web site can bypass the Same Origin Policy to disclose sensitive window-state information (information-disclosure vulnerability). Root cause is tied to how IE/Edge handle window/state data acr...

CVE-2017-0266

CVE-2017-0266 maps to a Microsoft Edge remote code execution vulnerability. The issue arises from the scripting engine’s handling of in‑memory objects, enabling an attacker to execute arbitrary code in the context of the current user if a user visits a crafted page. The vulnerability affects Micr...

CVE-2017-11806

CVE-2017-11806 affects ChakraCore and Microsoft Edge in Windows 10 version 1703, where the scripting engine’s in-memory object handling can lead to memory corruption and arbitrary code execution in the current user context. The vulnerability is described as a memory corruption flaw in ChakraCore’...

CVE-2017-11807

Technical details for CVE-2017-11807 are not publicly provided in the supplied documents. The connected advisories cover ChakraCore RCE/memory corruption generically but do not specify affected product versions, root cause, or fixes for this CVE. Monitor for updates.

CVE-2017-11863

Microsoft Edge in Windows 10 (Gold/1511/1607/1703/1709) and Windows Server 2016/1709 is affected by a vulnerability where Edge CSP validation can be bypassed, allowing an attacker to trick a user into loading a page with malicious content. Root cause: improper validation of CSP in Edge when loadi...

CVE-2017-8647

Technical details for CVE-2017-8647 are not publicly available in the provided connected documents. Monitor for updates from vendors/security advisories; no product/version/impact is specified in the supplied materials.

CVE-2017-8729

CVE-2017-8729 affects Microsoft Edge on Windows 10 version 1703. It is caused by the scripting engine’s handling of in-memory objects, leading to memory corruption and the ability for an attacker to execute arbitrary code in the current user context. The provided documents confirm the vulnerabili...

CVE-2018-8457

Technical details about CVE-2018-8457 are not provided in the connected documents; the initial description is high-level. Monitor for updates.

CVE-2019-0938

CVE-2019-0938 affects Microsoft Edge and describes an elevation of privilege vulnerability that could allow an attacker to escape the Edge AppContainer sandbox. The NVD entry records a high-severity, client-side network-exploitable issue with a CVSS3 base score of 9.0 (critical) and impact on con...

CVE-2021-36930

Technical details about CVE-2021-36930 (affected software, root cause, impact, and fixes) are not publicly provided in the connected documents. Monitor for updates from authoritative advisories; this corpus references the CVE but does not specify specifics.

CVE-2016-0191

The Chakra JavaScript engine in Microsoft Edge is vulnerable to a memory corruption (buffer overflow) flaw, also known as the "Scripting Engine Memory Corruption Vulnerability." This vulnerability allows remote attackers to execute arbitrary code or trigger a denial of service by 방문하는 a specially...

CVE-2017-0131

CVE-2017-0131 describes a remote code execution in Microsoft scripting engines when rendering objects in memory in Microsoft browsers. The root cause is memory corruption during object handling in the scripting engine, allowing an attacker to execute arbitrary code in the context of the current u...

CVE-2017-0240

CVE-2017-0240 is a remote code execution issue in Microsoft Edge arising from how the Microsoft scripting engine renders objects in memory. The vulnerability affects the Edge scripting engine component and could allow code execution in the context of the current user. Microsoft released security ...

CVE-2017-11812

CVE-2017-11812 is a ChakraCore/Edge memory-corruption vulnerability on Windows 10 (versions 1511, 1607, 1703) and Windows Server 2016. The root cause is in how the Chakra scripting engine handles in-memory objects, enabling an attacker to execute arbitrary code in the context of the current user....

CVE-2017-11839

CVE-2017-11839 is a Microsoft Edge scripting engine memory corruption vulnerability affecting Windows 10 (Gold/1511/1607/1703/1709) and Windows Server 2016/1709. The root cause is memory handling of objects in the scripting engine, leading to remote code execution when a user visits a crafted pag...

CVE-2017-8755

CVE-2017-8755 is a memory corruption vulnerability in the Microsoft Edge scripting engine on Windows 10 (versions 1511, 1607, 1703) and Windows Server 2016. An attacker could execute arbitrary code in the context of the current user by abusing how Edge handles objects in memory. The NVD metrics l...

CVE-2018-0773

Technical details for CVE-2018-0773 are not publicly provided in the supplied documents. No affected products, root cause, impact, or remediation details are included. Monitor for updates.

CVE-2018-0776

CVE-2018-0776 affects Microsoft Edge scripting engine memory handling in Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016, enabling code execution in the context of the current user. Connected sources indicate exploitation: CIRCL sightings list the CVE-2018-0776 exploit (exploit-...

CVE-2019-0812

Technical details about CVE-2019-0812 are not publicly available in the provided documents. Monitor for updates from vendors or security advisories.

CVE-2019-1192

Technical details for CVE-2019-1192 are not publicly available in the provided documents. Monitor for updates from Microsoft MSRC and NVD.

CVE-2020-1096

CVE-2020-1096: Microsoft Edge PDF Reader remote code execution vulnerability. It arises when Edge PDF Reader improperly handles objects in memory, allowing an attacker to run arbitrary code in the current user’s context via specially crafted PDF content. The vulnerability could grant the attacker...

CVE-2020-17153

CVE-2020-17153 affects Microsoft Edge for Android. The connected sources describe a spoofing vulnerability in Edge for Android, attributed to insufficient input validation in the browser, enabling a remote attacker to spoof the user interface and potentially access protected information. Public d...

CVE-2016-1108

CVE-2016-1108 is an Adobe Flash Player vulnerability (affecting 21.0.0.213 and earlier in Flash libraries used by IE/Edge) described as a use-after-free leading to remote code execution. Public writeups and advisories (APSB16-15) attribute exploitation to crafted SWF handling, with patches releas...

CVE-2016-3296

CVE-2016-3296 affects the Chakra JavaScript engine used by Microsoft Edge. The vulnerability is a remote code execution flaw caused by memory corruption in the scripting engine when handling in-memory objects, exploitable via a crafted web site. Impact includes arbitrary code execution under the ...

CVE-2016-7196

CVE-2016-7196 affects Microsoft Internet Explorer 10/11 and Microsoft Edge. The vulnerability enables remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site. Severity is HIGH (CVSS v3: 7.5) with network access, user interaction required....

CVE-2017-0065

CVE-2017-0065 concerns Microsoft Edge memory disclosure via a crafted web site, described as a remote information-collection vulnerability. Exploitation would allow an attacker to obtain sensitive information from the Edge process memory. The NVD entry lists a CVSSv3 base score of 4.3 (MEDIUM) wi...

CVE-2017-8499

CVE-2017-8499 affects Microsoft Edge on Windows 10 (1703). The description and CNVD entry indicate a remote memory corruption vulnerability in Edge’s scripting engine that can allow arbitrary code execution in the context of the current user when Edge mishandles in-memory objects. Mitigation is v...

CVE-2018-8542

CVE-2018-8542 describes a remote code execution vulnerability in the Chakra scripting engine memory handling that affects Microsoft Edge and ChakraCore. The flaw arises from how in-memory objects are processed, enabling arbitrary code execution on vulnerable systems. Exploitation details, affecte...

CVE-2018-8555

Technical details for CVE-2018-8555 are not publicly available in the provided documents. Monitor for updates and follow the disclosure pages for concrete affected components, root cause, and fixes.

CVE-2019-0649

CVE-2019-0649 describes a vulnerability in Microsoft Chakra JIT server (Scripting Engine) that could enable elevation of privileges. The Microsoft security guidance notes that the flaw is addressed by altering how Chakra handles constructorCaches, with updates provided by multiple KB/MSRC advisor...

CVE-2020-1242

CVE-2020-1242 is an information-disclosure issue in Microsoft Edge where cross-origin requests are mishandled, enabling an attacker to determine the origin of pages viewed in the affected browser (Edge information leakage). CNVD-2020-61592 documents this vulnerability and OpenVAS KBs reference it...

CVE-2016-0111

CVE-2016-0111 affects Microsoft Internet Explorer 9–11 and Microsoft Edge. It is a memory corruption/remote code execution vulnerability triggered by visiting a crafted site, caused by improper memory handling in the browser. Exploitation existed (e.g., Exploit-DB) and patches were released (MS16...

CVE-2016-3259

CVE-2016-3259 concerns memory corruption in Microsoft JScript 9, VBScript, and Chakra JavaScript engines used by Internet Explorer 9–11 and Edge, per the CVE entry and multiple related advisories. The connected documents corroborate a Chakra/JScript/VBScript memory corruption vulnerability that e...

CVE-2016-3260

The CVE-2016-3260 issue affects Microsoft’s scripting engines (JScript 9, VBScript, and Chakra) used by Internet Explorer 11 and Microsoft Edge. A memory corruption flaw in the engines could allow remote code execution or a denial of service when processing a crafted web site, as described in the...

CVE-2016-3370

CVE-2016-3370 corresponds to a PDF library information-disclosure vulnerability in Microsoft Edge on Windows 8.1, Windows Server 2012 R2/2012, Windows RT 8.1, and Windows 10 versions (1511, 1607). The issue allows remote attackers to obtain sensitive information via a crafted web site or content,...

CVE-2016-7282

Technical details for CVE-2016-7282 are not provided in the connected documents. Public details (affected product/version, root cause, exploit info, and fixes) are not disclosed here; monitor official bulletins for updates.

CVE-2017-8608

CVE-2017-8608 is described as a remote code execution vulnerability in the Microsoft browser JavaScript engine, caused by memory corruption when handling objects in memory. Affected products include Microsoft browsers on Windows platforms (Internet Explorer/Edge components inside Windows 7/8/10 f...

CVE-2017-8653

CVE-2017-8653 is a memory-corruption vulnerability in Microsoft browsers on Windows platforms (several Windows versions listed in the initial entry) that allows remote code execution when the browser improperly accesses objects in memory. The issue is categorized under a browser memory corruption...

CVE-2017-8736

CVE-2017-8736 is an information-disclosure vulnerability affecting Internet Explorer in Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1/RT 8.1, Windows Server 2012 R2, and Internet Explorer/Edge in Windows 10 (Gold and various builds). The root cause, as described in connected Nessus data,...

CVE-2017-8756

CVE-2017-8756 is documented as a Microsoft Edge memory-corruption vulnerability in Windows 10 (variants 1511, 1607, 1703) and Windows Server 2016, caused by how Edge accesses objects in memory, enabling arbitrary code execution in the current user context. The connected Nessus plugin entry 104385...

CVE-2018-0937

CVE-2018-0937 concerns ChakraCore and Windows 10 (notably 1703 and 1709) enabling remote code execution via how the Chakra scripting engine manages objects in memory, i.e., a memory-corruption vulnerability in Chakra. The connected advisories reiterate an RCE issue affecting ChakraCore across Win...