Microsoft Microsoft Edge (EdgeHTML-based) vulnerabilities (CVE)

CVE records published for Microsoft Microsoft Edge (EdgeHTML-based), newest first. Follow to get an email when a new one appears.

44 results
4.2Medium
CVE-2020-1180

Scripting Engine Memory Corruption Vulnerability

Microsoft ChakraCore; Microsoft Microsoft Edge (EdgeHTML-based)

<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. A…

2.1%EPSS
4.2Medium
CVE-2020-1172

Scripting Engine Memory Corruption Vulnerability

Microsoft ChakraCore; Microsoft Microsoft Edge (EdgeHTML-based)

<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. A…

2.2%EPSS
4.2Medium
CVE-2020-1057

Scripting Engine Memory Corruption Vulnerability

Microsoft ChakraCore; Microsoft Microsoft Edge (EdgeHTML-based)

<p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. A…

2.2%EPSS
4.2Medium
CVE-2020-0878 KEV Used in ransomware

Microsoft Browser Memory Corruption Vulnerability

Microsoft ChakraCore; Microsoft Microsoft Edge (EdgeHTML-based); Microsoft Internet Explorer 9; Microsoft Internet Explorer 11

<p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker…

2.7%EPSS
7.8High
CVE-2020-1569

Microsoft Edge Memory Corruption Vulnerability

Microsoft Microsoft Edge (EdgeHTML-based)

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An attacker who…

3.0%EPSS
7.5High
CVE-2020-1568

Microsoft Edge PDF Remote Code Execution Vulnerability

Microsoft Microsoft Edge (EdgeHTML-based)

A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An at…

3.1%EPSS
Unscored
CVE-2020-1555

Scripting Engine Memory Corruption Vulnerability

Microsoft ChakraCore; Microsoft Microsoft Edge (EdgeHTML-based)

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of th…

4.5%EPSS
4.2Medium
CVE-2020-1096

Microsoft Edge PDF Remote Code Execution Vulnerability

Microsoft Microsoft Edge (EdgeHTML-based)

A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current user. An at…

2.1%EPSS
4.2Medium
CVE-2020-1065

Scripting Engine Memory Corruption Vulnerability

Microsoft ChakraCore; Microsoft Microsoft Edge (EdgeHTML-based)

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An a…

2.2%EPSS
4.3Medium
CVE-2020-1059

Microsoft Edge Spoofing Vulnerability

Microsoft Microsoft Edge (EdgeHTML-based)

A spoofing vulnerability exists when Microsoft Edge does not properly parse HTTP content. An attacker who successfully exploited this vulnerability could trick a user by redirecting the user to a specially crafted website. The specially crafted website could …

2.1%EPSS
5.4Medium
CVE-2020-1056

Microsoft Edge Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (EdgeHTML-based)

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain. In a web-based attack scenario, an attac…

2.1%EPSS
4.2Medium
CVE-2020-1037

Chakra Scripting Engine Memory Corruption Vulnerability

Microsoft ChakraCore; Microsoft Microsoft Edge (EdgeHTML-based)

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the contex…

2.2%EPSS
4.2Medium
CVE-2019-1197

Chakra Scripting Engine Memory Corruption Vulnerability

Microsoft ChakraCore; Microsoft Microsoft Edge (EdgeHTML-based)

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the contex…

1.9%EPSS
4.2Medium
CVE-2019-1196

Chakra Scripting Engine Memory Corruption Vulnerability

Microsoft ChakraCore; Microsoft Microsoft Edge (EdgeHTML-based)

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the contex…

1.9%EPSS
4.2Medium
CVE-2019-1195

Chakra Scripting Engine Memory Corruption Vulnerability

Microsoft ChakraCore; Microsoft Microsoft Edge (EdgeHTML-based)

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the contex…

1.9%EPSS
6.4Medium
CVE-2019-1193

Microsoft Browser Memory Corruption Vulnerability

Microsoft Internet Explorer 10; Microsoft Internet Explorer 11; Microsoft Microsoft Edge (EdgeHTML-based)

A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker wh…

3.1%EPSS
4.3Medium
CVE-2019-1192

Microsoft Browsers Security Feature Bypass Vulnerability

Microsoft Internet Explorer 10; Microsoft Internet Explorer 11; Microsoft Microsoft Edge (EdgeHTML-based)

A security feature bypass vulnerability exists when Microsoft browsers improperly handle requests of different origins. The vulnerability allows Microsoft browsers to bypass Same-Origin Policy (SOP) restrictions, and to allow requests that should otherwise be…

3.7%EPSS
4.2Medium
CVE-2019-1141

Chakra Scripting Engine Memory Corruption Vulnerability

Microsoft ChakraCore; Microsoft Microsoft Edge (EdgeHTML-based)

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the contex…

1.9%EPSS