CVE-2017-8617

CVE-2017-8617 is a remote code execution vulnerability in Microsoft Edge on Windows 10 (1703) where memory objects are mishandled by scripting engines. Underlying cause: improper handling of objects in memory in Edge’s scripting engine, allowing an attacker to execute arbitrary code in the contex...

CVE-2016-3244

CVE-2016-3244 affects Microsoft Edge and is a security feature bypass where ASLR protections could be bypassed via a crafted web page. The underlying issue is that Edge does not properly implement ASLR, enabling a remote attacker to bypass address space layout randomization. The record confirms E...

CVE-2016-7204

CVE-2016-7204 affects Microsoft Edge and is described as an information-disclosure vulnerability where Edge improperly handles memory objects. The vulnerability could allow a remote attacker to access a user’s My Documents folder via a crafted web site. Exploitation requirements include persuadin...

CVE-2017-0196

Summary: CVE-2017-0196 concerns the Microsoft scripting engine (ChakraCore) exposing information through a heap over-read in the IsMissingItem function when processing crafted web content, enabling a remote attacker to read confidential memory. Affected component: Microsoft ChakraCore JavaScript ...

CVE-2025-49736

The CVE-2025-49736 entry concerns Microsoft Edge (Chromium-based) for Android where the UI can perform an incorrect action, enabling spoofing of the user interface over a network. The available data confirms the affected product family (Edge for Android) and the general impact (spoofing via UI ma...

CVE-2025-49755

Microsoft Edge for Android is affected by CVE-2025-49755, a UI misrepresentation spoofing vulnerability in which an attacker could exploit network access to deceive users. The associated data identifies the affected product as Edge (Chromium-based) on Android and cites a CVSSv3.1 base score of 4....

CVE-2026-35429

CVE-2026-35429 affects Microsoft Edge for Android (Chromium-based) . The vulnerability is a UI misrepresentation that enables an unauthorized attacker to perform spoofing over a network. The CVSS 3.1 vector shows network attack, low attack complexity, no privileges required, user interaction need...

CVE-2025-62224

CVE-2025-62224 affects Microsoft Edge for Android. The issue is a UI misrepresentation of critical information in the browser, enabling a network-based spoofing scenario by an authorized attacker. Documented impact is spoofing of the user interface with low to medium severity in various sources; ...