CVE-2017-8741

CVE-2017-8741 affects Internet Explorer/Edge rendering engines in Windows platforms; the vulnerability arises from how scripting engines render objects in memory, enabling an attacker to execute arbitrary code in the context of the current user. The Nessus-derived details describe a remote-code-e...

CVE-2018-0762

CVE-2018-0762 concerns memory corruption in Microsoft scripting engines used by Internet Explorer/Edge. Connected reports focus on CVE-2018-0770 (Edge scripting engine memory corruption) as the active remote code execution vulnerability: the issue arises from how the scripting engine handles obje...

CVE-2020-1403

Technical details about CVE-2020-1403 are not provided in the connected documents; no specific products, root cause, impact, or remediation are listed here. Monitor for updates.

CVE-2018-0891

The vulnerability is a ChakraCore/information-disclosure issue in the scripting engine. Public details show that ChakraCore and related components in Microsoft Edge/IE could disclose memory-resident objects due to scripting engine memory handling, affecting ChakraCore-based runtimes and Edge/IE o...

CVE-2019-0918

Technical details (affected product, vulnerable component, impact, fixes) are not publicly available in the provided documents. Monitor for updates from official sources.

CVE-2009-2502

CVE-2009-2502 is a GDI+ TIFF buffer overflow vulnerability that could allow remote code execution when processing a specially crafted TIFF image. The vulnerability affects multiple Microsoft products enabled via Internet Explorer 6 SP1, various Windows and Office suites, Viewer components, and re...

CVE-2013-3886

CVE-2013-3886 affects Microsoft Internet Explorer 9 and 10. The vulnerability is a memory-corruption flaw exploitable via a crafted web site, allowing remote code execution or a denial of service. The issue is addressed by MS13-080 (CVE-2013-3886 is one of multiple IE vulnerabilities resolved by ...

CVE-2016-3353

CVE-2016-3353 affects Microsoft Internet Explorer 9–11. The vulnerability arises because IE mishandles .url shortcut files from the Internet zone, enabling a security feature bypass that could bypass access restrictions via a crafted file and is described as the Internet Explorer Security Feature...

CVE-2019-1238

Technical details about CVE-2019-1238 are not provided in the connected documents. The initial description lacks further specifics; monitor for updates from official sources.

CVE-2008-3013

CVE-2008-3013 corresponds to a GDI+ GIF parsing vulnerability. The connected KB954593 (MS08-052) describes remote code execution in Windows GDI+ when a user views a specially crafted GIF, affecting multiple Windows versions and Office components. The underlying issue is memory corruption during G...

CVE-2017-11837

CVE-2017-11837 affects ChakraCore/Edge scripting engine memory handling. Root cause: memory corruption when manipulating JavaScript objects in memory, enabling an attacker to execute code with the current user’s privileges. Affected products include ChakraCore and Microsoft Edge on Windows 10 (17...

CVE-2017-11890

Technical details for CVE-2017-11890 are not publicly available in the provided Connected documents. The Initial Description notes Windows IE scripting engine memory corruption, but no vendor/product/version specifics or remediation are included here. Monitor for updates from official advisories ...

CVE-2013-1312

CVE-2013-1312 affects Microsoft Internet Explorer 9 and 10. The vulnerability is a use-after-free in mshtml/CDOMTextNode where an in-memory object that has been deleted is accessed via a crafted web page, leading to remote code execution. Exploitation requires the user to visit a malicious page o...

CVE-2015-1666

CVE-2015-1666 is a Microsoft Internet Explorer memory‑corruption vulnerability affecting IE6–IE11 that can allow remote code execution via a crafted web page. The connected documents confirm the vulnerability exists (shared with CVE-2015-1652 as a different issue) and note related advisories (e.g...

CVE-2017-11846

CVE-2017-11846 affects ChakraCore and Edge/IE scripting engine in Windows 7 SP1, Windows Server 2008/2008 R2, 8.1, 10 (various builds), and Windows Server 2012/2012 R2, with memory handling in the scripting engine leading to memory corruption. The vulnerability could allow an attacker to execute ...

CVE-2017-11895

CVE-2017-11930 concerns ChakraCore/Edge up through Windows 10 and Windows Server 2016, caused by memory handling in the scripting engine that can permit code execution in the context of the current user. The related advisories describe a “Scripting Engine Memory Corruption Vulnerability” with rem...

CVE-2018-0840

Technical details specific to CVE-2018-0840 are not provided in the connected documents. The GHSA advisories describe ChakraCore memory corruption vulnerabilities in general, but do not disclose affected products/versions or impacts for this CVE. Monitor for updates.

CVE-2018-0866

Technical details for CVE-2018-0866 are not publicly available in the provided documents. Connected advisories describe ChakraCore-related issues unrelated to this CVE. Monitor for updates.

CVE-2019-0783

Technical details about CVE-2019-0783 are not publicly available in the provided Connected documents. Monitor for updates.

CVE-2017-11912

CVE-2017-11912 is a ChakraCore scripting engine memory corruption vulnerability affecting ChakraCore, IE/Edge on Windows platforms listed in the Initial document. Connected sources describe remote code execution risk due to memory object handling, enabling an attacker to run code in the context o...

CVE-2017-8618

CVE-2017-8618 affects Internet Explorer across multiple Windows versions, describing memory corruption in scripting engines when handling objects in memory (VBScript/JavaScript rendering). The root cause is how the scripting engines render in memory, enabling remote code execution when a user vis...

CVE-2019-1357

Technical details are not publicly available in the provided documents. No information on affected products, versions, root cause, or remediation is provided. Action: monitor for updates.

CVE-2019-1485

CVE-2019-1485 maps to a remote code execution via the VBScript engine in Microsoft Internet Explorer (IE 9–11). The CNVD entry describes memory object handling in the VBScript engine as the root cause, enabling arbitrary code execution in the context of the current user when processing crafted VB...

CVE-2016-7195

CVE-2016-7195 affects Microsoft Internet Explorer 9–11 and Microsoft Edge, exposing memory corruption via a crafted webpage that can lead to remote code execution or memory DO S. This entry is closely tied to CVE-2016-7198 (a different vulnerability with the same attack surface) and is corroborat...

CVE-2017-11901

Technical details for CVE-2017-11901 are not publicly available in the provided documents. The connected items reference related ChakraCore advisories and sightings but do not supply product/version/root cause or fix information for this CVE. Monitor for updates.

CVE-2018-0889

The CVE-2018-0889 entry concerns Microsoft Edge on Windows 10 (Gold, 1511, 1607, 1703, 1709) and Windows Server 2016, where remote code execution is possible due to how the Scripting Engine handles objects in memory (Scripting Engine Memory Corruption Vulnerability). Affected component is Edge’s ...

CVE-2020-17058

CVE-2020-17058 is described as a Microsoft Browser Memory Corruption Vulnerability. The available details show a memory corruption flaw in the Microsoft Browser, with impact on confidentiality, integrity, and availability rated HIGH (CVSS v3.1: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H). The vulnerabil...

CVE-2014-0310

Technical details for CVE-2014-0310 are not provided in the connected documents. The available sources describe IE memory-corruption vulnerabilities in general; monitor for updates and verify against official advisories for specifics (affected versions, root cause, fix).

CVE-2018-0949

CVE-2018-0949 is a security feature bypass affecting Microsoft Internet Explorer (IE9, IE10, IE11) caused by improper handling of UNC resource requests. Multiple sources (NVD and OpenVAS feeds) corroborate a vulnerability class described as an Internet Explorer Security Feature Bypass Vulnerabili...

CVE-2019-0680

Technical details for CVE-2019-0680 are not present in the provided documents; no affected products, root cause, impact, or fixes are disclosed here. Monitor for updates.

CVE-2016-1100

Technical details about CVE-2016-1100 are not publicly provided in the supplied documents. Monitor for updates on affected products, impact, and remediation.

CVE-2017-11827

CVE-2017-11827 is a memory corruption vulnerability in Microsoft Internet Explorer/Edge that could allow remote code execution with the current user’s privileges. The issue affects Internet Explorer and Edge components on Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1, Windows RT 8.1, Win...

CVE-2017-11887

CVE-2017-11906 is described across multiple sources as an information disclosure vulnerability in Microsoft Internet Explorer caused by improper handling of memory objects in the scripting engine. Affected software includes Internet Explorer on Windows platforms listed in the CVE description (Win...

CVE-2018-8619

CVE-2018-8619 is a remote code execution vulnerability in Internet Explorer tied to VBScript execution policy not properly restricting VBScript under certain conditions. Affected: IE 9, 10, and 11. Root cause: VBScript execution policy insufficiently restrictive, enabling code execution via craft...

CVE-2018-8643

CVE-2018-8643 relates to a memory corruption vulnerability in the Internet Explorer scripting engine. Affected products include IE9, IE10, and IE11, with remote code execution potential due to how memory objects are handled. The issue is documented across several feeds (CVE and related records); ...

CVE-2019-0764

Technical details for CVE-2019-0764 are not publicly available in the provided documents. The materials reference general browser tampering and unrelated Windows KB updates; monitor for future updates for affected products, components, and remediation.

CVE-2017-11913

Technical details for CVE-2017-11913 are not provided in the supplied documents. Monitor for official updates for affected products, impact, and remediation.

CVE-2019-0988

CVE-2019-0988 describes a remote code execution in the Microsoft scripting engine used by Internet Explorer and related browser components. The vulnerability arises from memory handling in the scripting engine, allowing an attacker to run arbitrary code with the current user’s privileges if a use...

CVE-2019-1081

CVE-2019-1081 is an information disclosure vulnerability in affected Microsoft browsers caused by improper handling of objects in memory. Exploitation could allow an attacker to obtain information to further compromise the user’s system, typically via web-based attack scenarios (malicious sites o...

CVE-2015-2494

Affected software: Microsoft Internet Explorer 7–11 and Microsoft Edge. Vulnerability: memory corruption leading to remote code execution or denial of service via a crafted web site. Root cause / details: memory corruption vulnerability in the browser rendering/handling of web content (as describ...

CVE-2017-11894

CVE-2017-11894 affects ChakraCore and certain Windows components (including Internet Explorer and Edge on Windows 7/8.1/Server 2008/2012 and Windows 10 releases) due to how the scripting engine handles in-memory objects. The vulnerability allows an attacker to gain the same user rights as the cur...

CVE-2019-0746

The Linked documents confirm CVE-2019-0746 is an information-disclosure vulnerability in the scripting engine of Microsoft Edge (ChakraCore). The issue arises when the engine mishandles in-memory objects, enabling unauthorized access to sensitive information. Descriptions consistently reference h...

CVE-2019-1056

Technical details about CVE-2019-1056 are not publicly available in the provided Connected documents; no specifics on affected product/version or remediation are given. Monitor for updates.

CVE-2020-1060

CVE-2020-1060 is a remote code execution vulnerability in the VBScript engine related to how it handles objects in memory. The CVE entry notes it is distinct from CVE-2020-1035, CVE-2020-1058, and CVE-2020-1093. The provided documents do not specify affected products/versions beyond referencing t...

CVE-2004-1166

CVE-2004-1166 describes a CRLF injection vulnerability in Internet Explorer 6.0.2800.1106 and earlier where an ftp:// URL containing a URL-encoded newline ("%0a") before the FTP command can cause the FTP commands to be injected into the session (e.g., via PORT). The connected MS06-042 bulletin do...

CVE-2010-0490

CVE-2010-0490 is an Uninitialized Memory Corruption vulnerability in Microsoft Internet Explorer (IE6, IE6 SP1, IE7, IE8) that could allow remote code execution when IE accesses an object that has not been properly initialized or has been deleted. Exploitation involves viewing a specially crafted...

CVE-2013-0022

CVE-2013-0022 is a use-after-free vulnerability in Microsoft Internet Explorer 9 (LSGetTrailInfo) that could allow remote code execution via a crafted web site. Affected product: Internet Explorer 9. Root cause: use-after-free leading to access to a deleted object. Impact: high/critical, per CVSS...

CVE-2016-3326

CVE-2016-3326 is an information-disclosure vulnerability affecting Microsoft Internet Explorer (IE9–IE11) and Edge, arising from how the browser handles objects in memory when processing crafted web content. The issue could allow remote attackers to obtain sensitive data via a malicious page. Aff...

CVE-2018-0954

CVE-2018-0954 describes a remote code execution vulnerability in the scripting engine’s handling of in-memory objects that affects Microsoft browsers. Affected products include Internet Explorer 9/10/11, Edge, and ChakraCore. Root cause: memory/object handling flaw in the scripting engine leading...

CVE-2020-0824

Technical details for CVE-2020-0824 are not publicly provided in the connected documents. No vendor/version/exploit information is present here. Monitor for updates from official advisories to reveal affected components, impact, and fixes.