Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
MicrosoftEdge*

44 matches found

CVE
CVE•added 2016/11/10 6:59 a.m.•205 views

CVE-2016-7202

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," as demonstrated by the Chakra JavaSc...

7.6CVSS7.8AI score0.90138EPSS
CVE
CVE•added 2016/11/10 6:59 a.m.•191 views

CVE-2016-7243

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7200, CVE-2016-7201, CV...

7.6CVSS7.8AI score0.90138EPSS
CVE
CVE•added 2016/11/10 6:59 a.m.•187 views

CVE-2016-7240

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7200, CVE-2016-7201, CV...

7.6CVSS7.8AI score0.90138EPSS
CVE
CVE•added 2016/11/10 6:59 a.m.•183 views

CVE-2016-7242

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7200, CVE-2016-7201, CV...

7.6CVSS7.8AI score0.90138EPSS
CVE
CVE•added 2016/11/10 6:59 a.m.•176 views

CVE-2016-7203

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7200, CVE-2016-7201, CV...

7.6CVSS7.8AI score0.90138EPSS
CVE
CVE•added 2016/11/10 6:59 a.m.•175 views

CVE-2016-7208

The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7200, CVE-2016-7201, CV...

7.6CVSS7.8AI score0.90138EPSS
CVE
CVE•added 2016/10/14 2:59 a.m.•101 views

CVE-2016-7190

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3386, CVE-2016-3389, and CVE-2016...

7.6CVSS7.6AI score0.79242EPSS
CVE
CVE•added 2016/10/14 2:59 a.m.•85 views

CVE-2016-7194

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3386, CVE-2016-3389, and CVE-2016...

7.6CVSS7.6AI score0.79242EPSS
CVE
CVE•added 2016/08/09 9:59 p.m.•82 views

CVE-2016-3319

The PDF library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allows remote attackers to execute arbitrary code via a crafted PDF file, aka "Microsoft PDF Remote Code Execution Vulnerability."

9.3CVSS7.3AI score0.37191EPSS
CVE
CVE•added 2016/11/10 6:59 a.m.•82 views

CVE-2016-7195

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7198.

7.6CVSS7.8AI score0.30629EPSS
CVE
CVE•added 2016/08/09 9:59 p.m.•80 views

CVE-2016-3326

Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Microsoft Browser Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3327.

5.3CVSS5.1AI score0.32707EPSS
CVE
CVE•added 2016/03/09 11:59 a.m.•78 views

CVE-2016-0109

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0102, CVE-2016-0103, CVE-2016-...

7.6CVSS7.6AI score0.38033EPSS
CVE
CVE•added 2016/11/10 6:59 a.m.•78 views

CVE-2016-7198

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-7195.

7.6CVSS7.8AI score0.30629EPSS
CVE
CVE•added 2016/06/16 1:59 a.m.•77 views

CVE-2016-3203

Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allow remote attackers to execute arbitrary code via a crafted PDF document, aka "Windows PDF Remote Code Execution Vulnerability."

9.3CVSS7.9AI score0.49159EPSS
CVE
CVE•added 2016/11/10 6:59 a.m.•77 views

CVE-2016-7239

The RegEx class in the XSS filter in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensitive information via unspecified vectors, aka "Microsoft Browser Information Disclosure Vulnerability."

3.1CVSS4.7AI score0.1353EPSS
CVE
CVE•added 2016/11/10 6:59 a.m.•75 views

CVE-2016-7227

The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to determine the existence of local files via unspecified vectors, aka "Microsoft Browser Information Disclosure Vulnerability."

3.1CVSS4.8AI score0.16141EPSS
CVE
CVE•added 2016/11/10 6:59 a.m.•74 views

CVE-2016-7199

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to bypass the Same Origin Policy and obtain sensitive window-state information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."

3.1CVSS4.8AI score0.16588EPSS
CVE
CVE•added 2016/03/09 11:59 a.m.•72 views

CVE-2016-0111

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0105, CVE-2016-0107,...

7.6CVSS7.6AI score0.44978EPSS
CVE
CVE•added 2016/11/10 6:59 a.m.•72 views

CVE-2016-7241

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."

7.6CVSS7.6AI score0.75027EPSS
CVE
CVE•added 2016/08/09 9:59 p.m.•69 views

CVE-2016-3322

Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3289.

7.6CVSS7.2AI score0.31575EPSS
CVE
CVE•added 2016/08/09 9:59 p.m.•66 views

CVE-2016-3327

Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Microsoft Browser Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3326.

5.3CVSS5.1AI score0.32707EPSS
CVE
CVE•added 2016/03/09 11:59 a.m.•62 views

CVE-2016-0102

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0103, CVE-2016-0106, CVE-2016-...

7.6CVSS7.6AI score0.38033EPSS
CVE
CVE•added 2016/07/13 1:59 a.m.•62 views

CVE-2016-3273

The XSS Filter in Microsoft Internet Explorer 9 through 11 and Microsoft Edge does not properly restrict JavaScript code, which allows remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."

5.3CVSS5.6AI score0.22915EPSS
CVE
CVE•added 2016/08/09 9:59 p.m.•62 views

CVE-2016-3296

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."

7.6CVSS7.2AI score0.2363EPSS
CVE
CVE•added 2016/07/13 1:59 a.m.•61 views

CVE-2016-3274

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to conduct content-spoofing attacks via a crafted URL, aka "Microsoft Browser Spoofing Vulnerability."

3.1CVSS5.4AI score0.0717EPSS
CVE
CVE•added 2016/11/10 6:59 a.m.•61 views

CVE-2016-7196

Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."

7.6CVSS7.6AI score0.54368EPSS
CVE
CVE•added 2016/07/13 1:59 a.m.•58 views

CVE-2016-3248

The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scrip...

9.3CVSS8.6AI score0.27132EPSS
CVE
CVE•added 2016/08/09 9:59 p.m.•58 views

CVE-2016-3289

Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3322.

7.6CVSS7.2AI score0.31575EPSS
CVE
CVE•added 2016/12/20 6:59 a.m.•57 views

CVE-2016-7206

Cross-site scripting (XSS) vulnerability in Microsoft Edge allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Microsoft Edge Information Disclosure Vulnerability," a different vulnerability than CVE-2016-7280.

6.1CVSS5.8AI score0.09084EPSS
CVE
CVE•added 2016/03/09 11:59 a.m.•56 views

CVE-2016-0125

Microsoft Edge mishandles the Referer policy, which allows remote attackers to obtain sensitive browser-history and request information via a crafted HTTPS web site, aka "Microsoft Edge Information Disclosure Vulnerability."

3.1CVSS4.7AI score0.04488EPSS
CVE
CVE•added 2016/08/09 9:59 p.m.•56 views

CVE-2016-3293

Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memory Corruption Vulnerability."

7.6CVSS7.2AI score0.31796EPSS
CVE
CVE•added 2016/11/10 6:59 a.m.•56 views

CVE-2016-7209

Microsoft Edge allows remote attackers to spoof web content via a crafted web site, aka "Microsoft Edge Spoofing Vulnerability."

5.3CVSS5.7AI score0.06822EPSS
CVE
CVE•added 2016/03/09 11:59 a.m.•55 views

CVE-2016-0130

Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0116, CVE-2016-0123, CVE-2016-0124, and CVE-2016-0129.

7.6CVSS7.7AI score0.24353EPSS
CVE
CVE•added 2016/07/13 1:59 a.m.•51 views

CVE-2016-3244

Microsoft Edge allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Edge Security Feature Bypass."

4.3CVSS5.8AI score0.20014EPSS
CVE
CVE•added 2016/03/09 11:59 a.m.•50 views

CVE-2016-0116

Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0123, CVE-2016-0124, CVE-2016-0129, and CVE-2016-0130.

7.6CVSS7.7AI score0.24353EPSS
CVE
CVE•added 2016/10/14 2:59 a.m.•50 views

CVE-2016-3388

Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privileges via unspecified vectors, aka "Microsoft Browser Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-3387.

5.3CVSS6.2AI score0.47517EPSS
CVE
CVE•added 2016/03/09 11:59 a.m.•49 views

CVE-2016-0105

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0107, CVE-2016-0111,...

7.6CVSS7.6AI score0.44978EPSS
CVE
CVE•added 2016/12/20 6:59 a.m.•49 views

CVE-2016-7181

Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability."

7.6CVSS7.8AI score0.21224EPSS
CVE
CVE•added 2016/03/09 11:59 a.m.•48 views

CVE-2016-0124

Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0116, CVE-2016-0123, CVE-2016-0129, and CVE-2016-0130.

7.6CVSS7.7AI score0.24353EPSS
CVE
CVE•added 2016/07/13 1:59 a.m.•48 views

CVE-2016-3246

Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability."

7.6CVSS7.9AI score0.18282EPSS
CVE
CVE•added 2016/03/09 11:59 a.m.•47 views

CVE-2016-0110

Microsoft Internet Explorer 10 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."

7.6CVSS7.7AI score0.24353EPSS
CVE
CVE•added 2016/03/09 11:59 a.m.•47 views

CVE-2016-0129

Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0116, CVE-2016-0123, CVE-2016-0124, and CVE-2016-0130.

7.6CVSS7.7AI score0.24353EPSS
CVE
CVE•added 2016/11/10 6:59 a.m.•46 views

CVE-2016-7204

Microsoft Edge allows remote attackers to access arbitrary "My Documents" files via a crafted web site, aka "Microsoft Edge Information Disclosure Vulnerability."

3.1CVSS5AI score0.18602EPSS
CVE
CVE•added 2016/03/09 11:59 a.m.•44 views

CVE-2016-0123

Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0116, CVE-2016-0124, CVE-2016-0129, and CVE-2016-0130.

7.6CVSS7.7AI score0.24353EPSS