Edge Security Vulnerabilities and Issues — Edge CVE List

Lucene search

MicrosoftEdge

12 matches found

CVE•added 2016/07/13 1:59 a.m.•69 views

CVE-2016-3260

The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engin...

9.3CVSS8.6AI score0.22641EPSS

CVE•added 2016/07/13 1:59 a.m.•63 views

CVE-2016-3264

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."

7.6CVSS8.1AI score0.20455EPSS

CVE•added 2016/07/13 1:59 a.m.•62 views

CVE-2016-3273

The XSS Filter in Microsoft Internet Explorer 9 through 11 and Microsoft Edge does not properly restrict JavaScript code, which allows remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."

5.3CVSS5.6AI score0.22915EPSS

CVE•added 2016/07/13 1:59 a.m.•61 views

CVE-2016-3274

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to conduct content-spoofing attacks via a crafted URL, aka "Microsoft Browser Spoofing Vulnerability."

3.1CVSS5.4AI score0.0717EPSS

CVE•added 2016/07/13 1:59 a.m.•58 views

CVE-2016-3248

The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11, Microsoft Edge, and other products, allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scrip...

9.3CVSS8.6AI score0.27132EPSS

CVE•added 2016/07/13 1:59 a.m.•56 views

CVE-2016-3259

9.3CVSS8.6AI score0.27132EPSS

CVE•added 2016/07/13 1:59 a.m.•56 views

CVE-2016-3265

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3269.

9.3CVSS8.6AI score0.25587EPSS

CVE•added 2016/07/13 1:59 a.m.•56 views

CVE-2016-3277

Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."

5.3CVSS5.8AI score0.17384EPSS

CVE•added 2016/07/13 1:59 a.m.•51 views

CVE-2016-3244

Microsoft Edge allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Edge Security Feature Bypass."

4.3CVSS5.8AI score0.20014EPSS

CVE•added 2016/07/13 1:59 a.m.•48 views

CVE-2016-3246

Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability."

7.6CVSS7.9AI score0.18282EPSS

CVE•added 2016/07/13 1:59 a.m.•45 views

CVE-2016-3269

9.3CVSS8.6AI score0.25587EPSS

CVE•added 2016/07/13 1:59 a.m.•45 views

CVE-2016-3271

The VBScript engine in Microsoft Edge allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Scripting Engine Information Disclosure Vulnerability."

6.5CVSS6.1AI score0.48184EPSS