Edge@- Security Vulnerabilities and Issues — Edge@- CVE List

Lucene search

MicrosoftEdge-

49 matches found

CVE•added 2020/09/11 5:15 p.m.•1055 views

CVE-2020-0878

A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabili...

7.5CVSS7AI score0.21619EPSS

CVE•added 2020/02/11 10:15 p.m.•277 views

CVE-2020-0713

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-0711, CVE-2020-0712, CVE-2020-0767.

7.6CVSS7.9AI score0.93744EPSS

CVE•added 2020/02/11 10:15 p.m.•236 views

CVE-2020-0711

7.6CVSS7.9AI score0.93744EPSS

CVE•added 2020/02/11 10:15 p.m.•227 views

CVE-2020-0712

7.6CVSS7.9AI score0.93744EPSS

CVE•added 2020/02/11 10:15 p.m.•225 views

CVE-2020-0710

7.6CVSS7.9AI score0.93744EPSS

CVE•added 2020/02/11 10:15 p.m.•222 views

CVE-2020-0767

7.6CVSS7.9AI score0.93744EPSS

CVE•added 2020/04/15 3:15 p.m.•202 views

CVE-2020-0970

7.6CVSS8AI score0.43238EPSS

CVE•added 2020/09/11 5:15 p.m.•142 views

CVE-2020-1057

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the v...

9.3CVSS6.7AI score0.02809EPSS

CVE•added 2020/09/11 5:15 p.m.•140 views

CVE-2020-1172

7.6CVSS6.6AI score0.01848EPSS

CVE•added 2020/03/12 4:15 p.m.•137 views

CVE-2020-0823

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-20...

7.6CVSS7.8AI score0.28794EPSS

CVE•added 2020/03/12 4:15 p.m.•136 views

CVE-2020-0768

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, ...

7.6CVSS7.7AI score0.28794EPSS

CVE•added 2020/11/11 7:15 a.m.•135 views

CVE-2020-17052

Scripting Engine Memory Corruption Vulnerability

8.1CVSS8.4AI score0.05837EPSS

CVE•added 2020/08/17 7:15 p.m.•130 views

CVE-2020-1555

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successf...

9.3CVSS7.9AI score0.1447EPSS

CVE•added 2020/03/12 4:15 p.m.•126 views

CVE-2020-0829

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-20...

7.6CVSS7.8AI score0.28794EPSS

CVE•added 2020/12/10 12:15 a.m.•125 views

CVE-2020-17131

Chakra Scripting Engine Memory Corruption Vulnerability

7.5CVSS4.5AI score0.02113EPSS

CVE•added 2020/11/11 7:15 a.m.•121 views

CVE-2020-17048

Chakra Scripting Engine Memory Corruption Vulnerability

8.1CVSS5AI score0.02949EPSS

CVE•added 2020/11/11 7:15 a.m.•121 views

CVE-2020-17054

Chakra Scripting Engine Memory Corruption Vulnerability

7.6CVSS4.4AI score0.02222EPSS

CVE•added 2020/03/12 4:15 p.m.•117 views

CVE-2020-0826

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-20...

7.6CVSS7.8AI score0.28794EPSS

CVE•added 2020/03/12 4:15 p.m.•117 views

CVE-2020-0827

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0828, CVE-2020-0829, CVE-20...

7.6CVSS7.8AI score0.28794EPSS

CVE•added 2020/03/12 4:15 p.m.•116 views

CVE-2020-0830

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, ...

7.6CVSS7.7AI score0.28794EPSS

CVE•added 2020/09/11 5:15 p.m.•116 views

CVE-2020-1180

7.6CVSS7AI score0.01789EPSS

CVE•added 2020/03/12 4:15 p.m.•115 views

CVE-2020-0828

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0829, CVE-20...

7.6CVSS7.8AI score0.28794EPSS

CVE•added 2020/03/12 4:15 p.m.•114 views

CVE-2020-0848

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-20...

7.6CVSS7.8AI score0.28794EPSS

CVE•added 2020/03/12 4:15 p.m.•113 views

CVE-2020-0825

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-2020-0829, CVE-20...

7.6CVSS7.8AI score0.28794EPSS

CVE•added 2020/06/09 8:15 p.m.•111 views

CVE-2020-1219

A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerability'.

7.6CVSS8.1AI score0.2928EPSS

CVE•added 2020/08/17 7:15 p.m.•111 views

CVE-2020-1568

A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vu...

7.6CVSS8.1AI score0.03113EPSS

CVE•added 2020/02/11 10:15 p.m.•110 views

CVE-2020-0663

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain.In a web-based attack scenario, an attacker could host a website that is used to ...

4.2CVSS5.5AI score0.01383EPSS

CVE•added 2020/06/09 8:15 p.m.•107 views

CVE-2020-1073

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'.

9.3CVSS7.9AI score0.13506EPSS

CVE•added 2020/03/12 4:15 p.m.•106 views

CVE-2020-0831

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0768, CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2020-0827, CVE-2020-0828, CVE-20...

7.6CVSS7.8AI score0.28794EPSS

CVE•added 2020/08/17 7:15 p.m.•101 views

CVE-2020-1569

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerabilit...

7.8CVSS8.2AI score0.02386EPSS

CVE•added 2020/11/11 7:15 a.m.•99 views

CVE-2020-17058

Microsoft Browser Memory Corruption Vulnerability

7.6CVSS7.9AI score0.04153EPSS

CVE•added 2020/03/12 4:15 p.m.•96 views

CVE-2020-0811

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0812.

7.6CVSS7.4AI score0.03426EPSS

CVE•added 2020/04/15 3:15 p.m.•96 views

CVE-2020-0969

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Chakra Scripting Engine Memory Corruption Vulnerability'.

7.6CVSS7.8AI score0.38317EPSS

CVE•added 2020/06/09 8:15 p.m.•95 views

CVE-2020-1220

A spoofing vulnerability exists when theMicrosoft Edge (Chromium-based) in IE Mode improperly handles specific redirects, aka 'Microsoft Edge (Chromium-based) in IE Mode Spoofing Vulnerability'.

6.1CVSS6.9AI score0.00256EPSS

CVE•added 2020/07/14 11:15 p.m.•92 views

CVE-2020-1462

An information disclosure vulnerability exists when Skype for Business is accessed via Microsoft Edge (EdgeHTML-based), aka 'Skype for Business via Microsoft Edge (EdgeHTML-based) Information Disclosure Vulnerability'.

4.3CVSS5.8AI score0.12782EPSS

CVE•added 2020/05/21 11:15 p.m.•91 views

CVE-2020-1065

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'.

7.6CVSS7.6AI score0.04538EPSS

CVE•added 2020/03/12 4:15 p.m.•90 views

CVE-2020-0816

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'.

9.3CVSS9.2AI score0.20625EPSS

CVE•added 2020/07/14 11:15 p.m.•90 views

CVE-2020-1433

An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka 'Microsoft Edge PDF Information Disclosure Vulnerability'.

6.5CVSS6.9AI score0.22806EPSS

CVE•added 2020/02/11 10:15 p.m.•85 views

CVE-2020-0706

An information disclosure vulnerability exists in the way that affected Microsoft browsers handle cross-origin requests, aka 'Microsoft Browser Information Disclosure Vulnerability'.

4.3CVSS5.5AI score0.07537EPSS

CVE•added 2020/03/12 4:15 p.m.•85 views

CVE-2020-0813

An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the userâ€™s computer or data.To exploit the vulnerability, an attacker must know the memory address of where the object...

7.5CVSS7.5AI score0.09201EPSS

CVE•added 2020/05/21 11:15 p.m.•85 views

CVE-2020-1195

An elevation of privilege vulnerability exists in Microsoft Edge (Chromium-based) when the Feedback extension improperly validates input, aka 'Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability'.

5.9CVSS5.9AI score0.0565EPSS

CVE•added 2020/09/11 5:15 p.m.•81 views

CVE-2020-16884

A remote code execution vulnerability exists in the way that the IEToEdge Browser Helper Object (BHO) plugin on Internet Explorer handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An atta...

8.8CVSS5.5AI score0.01458EPSS

CVE•added 2020/03/12 4:15 p.m.•80 views

CVE-2020-0812

7.6CVSS7.4AI score0.03426EPSS

CVE•added 2020/05/21 11:15 p.m.•79 views

CVE-2020-1096

A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka 'Microsoft Edge PDF Remote Code Execution Vulnerability'.

7.6CVSS7.9AI score0.09794EPSS

CVE•added 2020/12/10 12:15 a.m.•78 views

CVE-2020-17153

Microsoft Edge for Android Spoofing Vulnerability

6.1CVSS4.4AI score0.01077EPSS

CVE•added 2020/05/21 11:15 p.m.•75 views

CVE-2020-1056

8.1CVSS8.2AI score0.14772EPSS

CVE•added 2020/06/09 8:15 p.m.•75 views

CVE-2020-1242

An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka 'Microsoft Edge Information Disclosure Vulnerability'.

5.3CVSS5.9AI score0.03715EPSS

CVE•added 2020/05/21 11:15 p.m.•74 views

CVE-2020-1037

7.6CVSS8AI score0.04538EPSS

CVE•added 2020/05/21 11:15 p.m.•71 views

CVE-2020-1059

A spoofing vulnerability exists when Microsoft Edge does not properly parse HTTP content, aka 'Microsoft Edge Spoofing Vulnerability'.

4.3CVSS6.1AI score0.02333EPSS