Category

Browsers

10,885 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

339 results · Clear filters · Feed

Unscored —

CVE-2016-9899 Public exploit EPSS 19%

Use-after-free while manipulating DOM events and removing audio elements due to errors in the handling of node adoption…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Jun 11, 2018
Unscored —

CVE-2017-7783 Public exploit EPSS 14%

If a long user name is used in a username/password combination in a site URL (such as " http://UserName:Password@exampl…

Mozilla Firefox mozjs38 firefox Browsers Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5447 Public exploit EPSS 17%

An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitab…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5375 Public exploit EPSS 34%

JIT code allocation can allow for a bypass of ASLR and DEP protections leading to potential memory corruption attacks. …

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Jun 11, 2018
Unscored —

CVE-2017-5465 Public exploit EPSS 18%

An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for othe…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5404 Public exploit EPSS 17%

A use-after-free error can occur when manipulating ranges in selections with one node inside a native anonymous tree an…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5415 Public exploit EPSS 12%

An attack can use a blob URL and script to spoof an arbitrary addressbar URL prefaced by "blob:" as the protocol, leadi…

Mozilla Firefox firefox Browsers Ubuntu

Jun 11, 2018
High 7.5

CVE-2018-0946 Public exploit EPSS 51%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

May 9, 2018
Unscored —

CVE-2018-0953 Public exploit EPSS 66%

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…

Microsoft Microsoft Edge ChakraCore Browsers

May 9, 2018
High 7.5

CVE-2018-8139 Public exploit EPSS 66%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

May 9, 2018
High 7.5

CVE-2018-8145 Public exploit EPSS 67%

ChakraCore information disclosure vulnerability

An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data, aka "Chakra Scripting Engine Memory Corruption Vuln…

Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet

May 9, 2018
High 7.5

CVE-2018-8133 Public exploit EPSS 50%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

May 9, 2018
Unscored —

CVE-2018-5511 Public exploit EPSS 14%

On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Managem…

F5 Networks BIG-IP (LTM, AAM, AFM, Analytics, APM, ASM, DNS, Edge Gateway, GTM, Link Controller, PEM, WebAccelerator, WebSafe); Enterprise Manager Network devices Browsers

Apr 13, 2018
High 7.5

CVE-2018-0980 Public exploit EPSS 66%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 12, 2018
Unscored —

CVE-2018-0891 Public exploit EPSS 14%

ChakraCore, and Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows R…

Microsoft ChakraCore, Microsoft Edge, Internet Explorer Browsers

Mar 14, 2018
High 7.5

CVE-2018-0934 Public exploit EPSS 66%

ChakraCore RCE Vulnerability

ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE I…

Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet

Mar 14, 2018
High 7.5

CVE-2018-0933 Public exploit EPSS 66%

ChakraCore RCE Vulnerability

ChakraCore and Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the Chakra scripting engine handles objects in memory, aka "Chakra Scripting Engine Memory Corruption Vulnerability". This CVE I…

Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet

Mar 14, 2018
Unscored —

CVE-2018-0840 Public exploit EPSS 53%

Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Serve…

Microsoft Microsoft Edge, ChakraCore, Internet Explorer Browsers

Feb 15, 2018
High 7.5

CVE-2018-0834 Public exploit EPSS 55%

ChakraCore RCE Vulnerability

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

Microsoft Microsoft Edge, ChakraCore Microsoft.ChakraCore Browsers NuGet

Feb 15, 2018
High 7.5

CVE-2018-0860 Public exploit EPSS 68%

ChakraCore RCE Vulnerability

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

Microsoft Microsoft Edge, ChakraCore Microsoft.ChakraCore Browsers NuGet

Feb 15, 2018
High 7.5

CVE-2018-0838 Public exploit EPSS 65%

ChakraCore RCE Vulnerability

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

Microsoft Microsoft Edge, ChakraCore Microsoft.ChakraCore Browsers NuGet

Feb 15, 2018
High 7.5

CVE-2018-0837 Public exploit EPSS 65%

ChakraCore RCE Vulnerability

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

Microsoft Microsoft Edge, ChakraCore Microsoft.ChakraCore Browsers NuGet

Feb 15, 2018
High 7.5

CVE-2018-0835 Public exploit EPSS 65%

ChakraCore RCE Vulnerability

Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This C…

Microsoft Microsoft Edge, ChakraCore Microsoft.ChakraCore Browsers NuGet

Feb 15, 2018
Unscored —

CVE-2017-15394 Public exploit

Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perfo…

chromium-browser oxide-qt Browsers Ubuntu

Feb 7, 2018
Unscored —

CVE-2017-5124 Public exploit

Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject…

chromium-browser oxide-qt Browsers Ubuntu

Feb 7, 2018
Unscored —

CVE-2018-0780 Public exploit EPSS 59%

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obta…

Microsoft Microsoft Edge Browsers

Jan 4, 2018
Unscored —

CVE-2018-0775 Public exploit EPSS 68%

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due …

Microsoft Microsoft Edge Browsers

Jan 4, 2018
Unscored —

CVE-2018-0769 Public exploit EPSS 79%

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

Microsoft Microsoft Edge Browsers

Jan 4, 2018
Unscored —

CVE-2018-0777 Public exploit EPSS 78%

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

Microsoft Microsoft Edge Browsers

Jan 4, 2018
Unscored —

CVE-2018-0758 Public exploit EPSS 81%

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

Microsoft Microsoft Edge Browsers

Jan 4, 2018
Unscored —

CVE-2018-0776 Public exploit EPSS 78%

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

Microsoft Microsoft Edge Browsers

Jan 4, 2018
Unscored —

CVE-2018-0774 Public exploit EPSS 68%

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due …

Microsoft Microsoft Edge Browsers

Jan 4, 2018
Unscored —

CVE-2018-0767 Public exploit EPSS 65%

Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain inf…

Microsoft Microsoft Edge Browsers

Jan 4, 2018
Unscored —

CVE-2018-0770 Public exploit EPSS 78%

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

Microsoft Microsoft Edge Browsers

Jan 4, 2018
Unscored —

CVE-2017-11918 Public exploit EPSS 63%

ChakraCore and Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to…

Microsoft ChakraCore, Microsoft Edge Browsers

Dec 12, 2017
High 7.5

CVE-2017-11911 Public exploit EPSS 65%

ChakraCore RCE Vulnerability

ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulne…

Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet

Dec 12, 2017
High 7.5

CVE-2017-11909 Public exploit EPSS 65%

ChakraCore vulnerable to remote code execution

ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulne…

Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet

Dec 12, 2017
High 7.5

CVE-2017-11914 Public exploit EPSS 63%

ChakraCore vulnerable to privilege escalation due to exposure from scriptFunction

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption…

Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet

Dec 12, 2017
High 7.5

CVE-2017-11893 Public exploit EPSS 68%

ChakraCore vulnerable to remote code execution

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memor…

Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet

Dec 12, 2017
High 7.5

CVE-2017-11870 Public exploit EPSS 60%

Chakra Core vulnerable to privilege escalation when writing to JavaScript null scope objects

ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vu…

Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet

Nov 15, 2017