Skip to content
OpenAdvisories

Category

Browsers

10,973 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3,584 results · Clear filters · Feed

  • High 7.5
    CVE-2017-11911 Public exploit EPSS 65%

    ChakraCore RCE Vulnerability

    ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulne…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2017-11909 Public exploit EPSS 65%

    ChakraCore vulnerable to remote code execution

    ChakraCore and Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulne…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2017-11910

    ChakraCore vulnerable to remote code execution due to insufficient InlineCache check

    ChakraCore and Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2017-11908

    ChakraCore RCE Vulnerability

    ChakraCore and Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is unique from CVE-2…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2017-11914 Public exploit EPSS 63%

    ChakraCore vulnerable to privilege escalation due to exposure from scriptFunction

    ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2017-11905

    ChakraCore RCE Vulnerability

    ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memor…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2017-11893 Public exploit EPSS 68%

    ChakraCore vulnerable to remote code execution

    ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memor…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2017-11870 Public exploit EPSS 60%

    Chakra Core vulnerable to privilege escalation when writing to JavaScript null scope objects

    ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vu…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2017-11862

    Chakra Core vulnerable to privilege escalation due to type confusion

    ChakraCore and Microsoft Edge in Windows 10 1709 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerabi…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2017-11871

    Chakra Core vulnerable to privilege escalation due to reading an invalid pointer

    ChakraCore and Microsoft Edge in Windows 10 1703, 1709, and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vu…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 8.8
    CVE-2017-5070 Exploited EPSS 32%

    Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, …

    chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
    KEV Jun 8, 2022
  • High 7.5
    CVE-2017-11792

    ChakraCore RCE Vulnerability

    ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allow an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This …

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2017-11807

    ChakraCore RCE Vulnerability

    ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2017-11796

    ChakraCore RCE Vulnerability

    ChakraCore and Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This CVE ID is…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2017-11805

    ChakraCore RCE Vulnerability

    ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2017-11821

    ChakraCore RCE Vulnerability

    ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2017-11806

    ChakraCore RCE Vulnerability

    ChakraCore and Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability". This…

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2017-0235 EPSS 11%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0224, CVE-2017-022…

    Microsoft Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2017-0224 EPSS 11%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way JavaScript engines render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0228, CVE-2017-0229, CVE-2017-0230…

    Microsoft Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2017-0234 EPSS 38%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0224, CVE-2017-022…

    Microsoft Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2017-0236 EPSS 32%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0224, CVE-2017-022…

    Microsoft Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • High 8.8
    CVE-2017-5029

    Nokogiri implementation of libxslt lacks integer overflow checks

    The xsltAddTextString function in transform.c in libxslt 1.1.29, as used in Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android, lacked a check for integer overflow during a size calculation, which allowed a …

    chromium-browser oxide-qt nokogiri libxslt Linux Windows Android Browsers Debian Ubuntu Alpine RubyGems
  • High 8.8
    CVE-2017-5030 Exploited EPSS 41%

    Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0…

    chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
    KEV Jun 8, 2022
  • High 8.8
    CVE-2016-5198 Exploited EPSS 34%

    V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac…

    chromium-browser oxide-qt libv8-3.14 Linux Windows Android Browsers Ubuntu
    KEV Jun 8, 2022