Skip to content
OpenAdvisories

Product · Microsoft

Microsoft Edge

276 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

41 results · Clear filters · Feed

  • Unscored —
    CVE-2019-0678 Public exploit

    An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, whi…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2019-0612 Public exploit EPSS 11%

    A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash ob…

    Microsoft Microsoft Edge Browsers
  • High 7.5
    CVE-2019-0567 Public exploit EPSS 80%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • Unscored —
    CVE-2019-0566 Public exploit EPSS 19%

    An elevation of privilege vulnerability exists in Microsoft Edge Browser Broker COM object, aka "Microsoft Edge Elevati…

    Microsoft Microsoft Edge Browsers
  • High 7.5
    CVE-2019-0568 Public exploit EPSS 69%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2019-0539 Public exploit EPSS 83%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2018-8617 Public exploit EPSS 62%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • Unscored —
    CVE-2018-8463 Public exploit EPSS 15%

    An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppCon…

    Microsoft Microsoft Edge Browsers
  • High 7.5
    CVE-2018-8467 Public exploit EPSS 69%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • Unscored —
    CVE-2018-8469 Public exploit EPSS 15%

    An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppCon…

    Microsoft Microsoft Edge Browsers
  • High 7.5
    CVE-2018-8466 Public exploit EPSS 69%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2018-8355 Public exploit EPSS 68%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is…

    Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet
  • High 7.5
    CVE-2018-8288 Public exploit EPSS 69%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is…

    Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet
  • Unscored —
    CVE-2018-8279 Public exploit EPSS 71%

    A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft …

    Microsoft Microsoft Edge ChakraCore Browsers
  • High 7.5
    CVE-2018-8291 Public exploit EPSS 69%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is…

    Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet
  • High 7.5
    CVE-2018-8229 Public exploit EPSS 71%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2018-0946 Public exploit EPSS 51%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • Unscored —
    CVE-2018-0953 Public exploit EPSS 66%

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…

    Microsoft Microsoft Edge ChakraCore Browsers
  • High 7.5
    CVE-2018-8139 Public exploit EPSS 66%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2018-8145 Public exploit EPSS 67%

    ChakraCore information disclosure vulnerability

    An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data, aka "Chakra Scripting Engine Memory Corruption Vuln…

    Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet
  • High 7.5
    CVE-2018-8133 Public exploit EPSS 50%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • High 7.5
    CVE-2018-0980 Public exploit EPSS 66%

    ChakraCore RCE Vulnerability

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

    Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet
  • Unscored —
    CVE-2018-0780 Public exploit EPSS 59%

    Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obta…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0775 Public exploit EPSS 68%

    Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due …

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0769 Public exploit EPSS 79%

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0777 Public exploit EPSS 78%

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0758 Public exploit EPSS 81%

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0776 Public exploit EPSS 78%

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0774 Public exploit EPSS 68%

    Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due …

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0767 Public exploit EPSS 65%

    Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to obtain inf…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2018-0770 Public exploit EPSS 78%

    Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitr…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2017-11764 Public exploit EPSS 64%

    Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2017-8729 Public exploit EPSS 72%

    Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current …

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2017-8740 Public exploit EPSS 72%

    Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current …

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2017-8751 Public exploit EPSS 50%

    Microsoft Edge in Microsoft Windows 1703 allows an attacker to execute arbitrary code in the context of the current use…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2017-8734 Public exploit EPSS 53%

    Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute ar…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2017-8755 Public exploit EPSS 71%

    Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrar…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2017-8644 Public exploit EPSS 15%

    Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to disclose i…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2017-8652 Public exploit EPSS 23%

    Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to disclose i…

    Microsoft Microsoft Edge Browsers
  • Unscored —
    CVE-2017-8548 Public exploit EPSS 68%

    Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain…

    Microsoft Microsoft Edge Browsers