Product · Microsoft

Microsoft Edge

276 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

276 results · Feed

Unscored —

CVE-2019-0762

A security feature bypass vulnerability exists when Microsoft browsers improperly handle requests of different origins,…

Microsoft Microsoft Edge Internet Explorer 11 Browsers

Apr 9, 2019
High 7.5

CVE-2019-0769 EPSS 10%

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0639, CVE-2019-0680, CVE-…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 9, 2019
Medium 6.5

CVE-2019-0746

Microsoft.ChakraCore vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft Edge, aka 'Scripting Engine Information Disclosure Vulnerability'.

Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet

Apr 8, 2019
Unscored —

CVE-2019-0678 Public exploit

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, whi…

Microsoft Microsoft Edge Browsers

Apr 8, 2019
High 7.5

CVE-2019-0639 EPSS 12%

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0609, CVE-2019-0680, CVE-2019-0769, CVE-2019-07…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 8, 2019
Unscored —

CVE-2019-0612 Public exploit EPSS 11%

A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash ob…

Microsoft Microsoft Edge Browsers

Apr 8, 2019
High 7.5

CVE-2019-0611

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0592.

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 8, 2019
High 7.5

CVE-2019-0609

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0639, CVE-2019-0680, CVE-2019-0769, CVE-2…

Microsoft Microsoft Edge ChakraCore Internet Explorer 11 Browsers NuGet

Apr 8, 2019
High 7.5

CVE-2019-0592 EPSS 23%

High severity vulnerability that affects Microsoft.ChakraCore

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0611.

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Apr 8, 2019
Unscored —

CVE-2019-0591 EPSS 11%

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…

Microsoft Microsoft Edge ChakraCore Browsers

Mar 6, 2019
High 8.1

CVE-2019-0649

Chakra JIT server Privilege Escalation

A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileged Vulnerability'.

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Mar 6, 2019
Unscored —

CVE-2019-0643

An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka 'Micro…

Microsoft Microsoft Edge Browsers

Mar 6, 2019
Unscored —

CVE-2019-0590 EPSS 11%

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…

Microsoft Microsoft Edge ChakraCore Browsers

Mar 6, 2019
Unscored —

CVE-2019-0605 EPSS 12%

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…

Microsoft Microsoft Edge ChakraCore Browsers

Mar 6, 2019
Unscored —

CVE-2019-0641

A security feature bypass vulnerability exists in Microsoft Edge handles whitelisting, aka 'Microsoft Edge Security Fea…

Microsoft Microsoft Edge Browsers

Mar 6, 2019
Medium 4.3

CVE-2019-0648

ChakraCore information disclosure vulnerability

An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data.To exploit the vulnerability, an attacker must know …

Microsoft Microsoft Edge Microsoft.ChakraCore Browsers NuGet

Mar 6, 2019
Unscored —

CVE-2019-0654

A spoofing vulnerability exists when Microsoft browsers improperly handles specific redirects, aka 'Microsoft Browser S…

Microsoft Microsoft Edge Internet Explorer 11 Internet Explorer 10 Browsers

Mar 6, 2019
Unscored —

CVE-2019-0640 EPSS 11%

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…

Microsoft Microsoft Edge ChakraCore Browsers

Mar 6, 2019
Unscored —

CVE-2019-0645

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft …

Microsoft Microsoft Edge Browsers

Mar 6, 2019
Unscored —

CVE-2019-0655 EPSS 13%

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…

Microsoft Microsoft Edge ChakraCore Browsers

Mar 6, 2019
Unscored —

CVE-2019-0642 EPSS 11%

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…

Microsoft Microsoft Edge ChakraCore Browsers

Mar 6, 2019
Unscored —

CVE-2019-0658

An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in …

Microsoft Microsoft Edge ChakraCore Browsers

Mar 6, 2019
Unscored —

CVE-2019-0651 EPSS 11%

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…

Microsoft Microsoft Edge ChakraCore Browsers

Mar 6, 2019
Unscored —

CVE-2019-0607 EPSS 11%

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…

Microsoft Microsoft Edge ChakraCore Browsers

Mar 6, 2019
Unscored —

CVE-2019-0652 EPSS 11%

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…

Microsoft Microsoft Edge ChakraCore Browsers

Mar 6, 2019
Unscored —

CVE-2019-0650 EPSS 19%

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft …

Microsoft Microsoft Edge Browsers

Mar 6, 2019
Unscored —

CVE-2019-0634

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft …

Microsoft Microsoft Edge Browsers

Mar 6, 2019
Unscored —

CVE-2019-0610 EPSS 11%

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…

Microsoft Microsoft Edge ChakraCore Browsers

Mar 6, 2019
Unscored —

CVE-2019-0644 EPSS 11%

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…

Microsoft Microsoft Edge ChakraCore Browsers

Mar 6, 2019
Unscored —

CVE-2019-0593 EPSS 20%

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…

Microsoft Microsoft Edge ChakraCore Browsers

Mar 6, 2019
Unscored —

CVE-2019-0565

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft …

Microsoft Microsoft Edge Browsers

Jan 8, 2019
High 7.5

CVE-2019-0567 Public exploit EPSS 80%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Jan 8, 2019
Unscored —

CVE-2019-0566 Public exploit EPSS 19%

An elevation of privilege vulnerability exists in Microsoft Edge Browser Broker COM object, aka "Microsoft Edge Elevati…

Microsoft Microsoft Edge Browsers

Jan 8, 2019
High 7.5

CVE-2019-0568 Public exploit EPSS 69%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Jan 8, 2019
High 7.5

CVE-2019-0539 Public exploit EPSS 83%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Jan 8, 2019
High 7.5

CVE-2018-8618 EPSS 11%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Dec 12, 2018
High 7.5

CVE-2018-8583 EPSS 11%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Dec 12, 2018
High 7.5

CVE-2018-8624 EPSS 13%

ChakraCore Remote code execution Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Dec 12, 2018
High 7.5

CVE-2018-8617 Public exploit EPSS 62%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Dec 12, 2018
High 7.5

CVE-2018-8629 EPSS 23%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique…

Microsoft Microsoft Edge ChakraCore Microsoft.ChakraCore Browsers NuGet

Dec 12, 2018