Skip to content
OpenAdvisories

Category

Browsers

10,968 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2,767 results · Clear filters · Feed

  • Medium 6.5
    CVE-2019-0746

    Microsoft.ChakraCore vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

    An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'.

    Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet
  • Medium 4.3
    CVE-2019-0648

    ChakraCore information disclosure vulnerability

    An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data.To exploit the vulnerability, an attacker must know …

    Microsoft Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • Medium 4.3
    CVE-2018-8452

    ChakraCore information disclosure vulnerability

    An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers, aka "Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Ed…

    Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet
  • Medium 4.2
    CVE-2018-8315

    ChakraCore information disclosure vulnerability

    An information disclosure vulnerability exists when the browser scripting engine improperly handle object types, aka "Microsoft Scripting Engine Information Disclosure Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Exp…

    Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet
  • Medium 6.5
    CVE-2018-8276

    ChakraCore Security Bypass

    A security feature bypass vulnerability exists in the Microsoft Chakra scripting engine that allows Control Flow Guard (CFG) to be bypassed, aka "Scripting Engine Security Feature Bypass Vulnerability." This affects Microsoft Edge, ChakraCore.

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • Medium 4.3
    CVE-2018-0939

    ChakraCore information disclosure vulnerability

    ChakraCore and Microsoft Edge in Windows 10 1703 and 1709 allow information disclosure, due to how the scripting engine handles objects in memory, aka "Scripting Engine Information Disclosure Vulnerability". This CVE ID is unique from CVE-2018-0891.

    Microsoft ChakraCore, Microsoft Edge Microsoft.ChakraCore Browsers NuGet
  • Medium 4.3
    CVE-2017-0208 EPSS 15%

    ChakraCore information disclosure vulnerability

    An information disclosure vulnerability exists in Microsoft Edge when the Chakra scripting engine does not properly handle objects in memory. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user's sy…

    Microsoft Edge Microsoft.ChakraCore Browsers NuGet