Microsoft Edge vulnerabilities
199 known CVE vulnerabilities in Microsoft Edge, translated and rated.
- CVE-2017-11861High
A vulnerability in the Microsoft Edge scripting engine in Windows 10 and Windows Server allows an attacker to gain the same user rights as the current user due to improper handling of objects in memory.
- CVE-2017-11845High
A vulnerability in Microsoft Edge on Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to improper handling of objects in memory.
- CVE-2017-11800High
Microsoft Edge in Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to how the scripting engine handles objects in memory.
- CVE-2017-11798High
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
- CVE-2017-8757High
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way Microsoft Edge handles objects in memory.
- CVE-2017-8756High
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way Microsoft Edge accesses objects in memory.
- CVE-2017-8755High
Microsoft Edge in Windows 10 (1511, 1607, 1703) and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way the scripting engine handles objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
- CVE-2017-8752High
Microsoft Edge in Windows 10 (1511, 1607, 1703) and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way the Microsoft Edge scripting engine handles objects in memory.
- CVE-2017-8751High
A vulnerability in Microsoft Edge in Windows 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way Microsoft Edge accesses objects in memory.
- CVE-2017-8740High
Microsoft Edge in Windows 10 version 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way the Microsoft Edge scripting engine handles objects in memory.
- CVE-2017-8738High
Microsoft Edge in Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to the way the Microsoft Edge scripting engine handles objects in memory.
- CVE-2017-8734High
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way Microsoft Edge accesses objects in memory.
- CVE-2017-8731High
Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way Microsoft Edge accesses objects in memory.
- CVE-2017-8729High
Microsoft Edge in Windows 10 version 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way the Microsoft Edge scripting engine handles objects in memory.
- CVE-2017-8660High
A vulnerability in Microsoft Edge on Windows 10 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user. The issue arises from flaws in the browser's JavaScript engines when rendering content in memory.
- CVE-2017-8649High
Microsoft Edge in Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way Microsoft browser JavaScript engines render content when handling objects in memory.
- CVE-2017-11766High
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way Microsoft Edge accesses objects in memory.
- CVE-2017-11764High
Microsoft Edge in Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way the Microsoft Edge scripting engine handles objects in memory.
- CVE-2017-8518High
Microsoft Edge allows a remote code execution vulnerability due to the way it accesses objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
- CVE-2017-8674High
Microsoft Edge in Windows 10 version 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way Microsoft browser JavaScript engines render content when handling objects in memory.
- CVE-2017-8670High
Microsoft Edge in Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content.
- CVE-2017-8657High
Microsoft Edge in Windows 10 (1511, 1607, 1703) and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to issues in how the browser's JavaScript engines render content, known as 'Scripting Engine Memory Corruption Vulnerability'.
- CVE-2017-8656High
Microsoft Edge in Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content, known as 'Scripting Engine Memory Corruption Vulnerability'.
- CVE-2017-8647High
Microsoft Edge in Windows 10 version 1703 allows an attacker to execute arbitrary code in the context of the current user due to flaws in how Microsoft browser JavaScript engines render content.
- CVE-2017-8646High
Microsoft Edge in Windows 10 (1511, 1607, 1703) and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to flaws in how the browser's JavaScript engines render content.
- CVE-2017-8645High
Microsoft Edge in Windows 10 (1511, 1607, 1703) and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content, known as 'Scripting Engine Memory Corruption Vulnerability'.
- CVE-2017-8640High
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content when handling objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
- CVE-2017-8639High
Microsoft Edge in Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript engines render content. This issue is known as 'Scripting Engine Memory Corruption Vulnerability'.
- CVE-2017-8638High
Microsoft Edge in Windows 10 version 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way Microsoft browser JavaScript engines render content when handling objects in memory.
- CVE-2017-8634High
Microsoft Edge in Windows 10 version 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way Microsoft browser JavaScript engines render content when handling objects in memory.
- CVE-2017-8503High
Microsoft Edge in Windows 10 (1511, 1607, 1703) and Windows Server 2016 allows an attacker to escape from the AppContainer sandbox, leading to elevation of privilege.
- CVE-2017-8617High
Microsoft Edge in Windows 10 version 1703 contains a vulnerability allowing remote code execution related to how Microsoft scripting engines render objects in memory.
- CVE-2017-8610High
A vulnerability in Microsoft Edge on Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render objects in memory.
- CVE-2017-8603High
Microsoft Edge in Windows 10 (1511, 1607, 1703) and Windows Server 2016 has a vulnerability that allows an attacker to execute arbitrary code in the context of the current user. The issue occurs when the JavaScript engine fails to properly handle objects in memory.
- CVE-2017-8598High
Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to a flaw in the JavaScript engine that improperly handles objects in memory.
- CVE-2017-8596High
Microsoft Edge in Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to a flaw in the JavaScript engine that improperly handles objects in memory.
- CVE-2017-8549High
Microsoft Edge in Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 has a vulnerability that allows an attacker to obtain information, potentially leading to further compromise of the user's system. The issue arises from improper handling of objects in memory by Microsoft Edge.
- CVE-2017-8548High
Microsoft Edge in Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 has a vulnerability that allows an attacker to obtain information that could lead to further compromising the user's system. The issue arises from improper handling of objects in memory by Microsoft Edge.
- CVE-2017-8521High
Microsoft Edge in Windows 10 version 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fails to handle objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
- CVE-2017-8520High
Microsoft Edge in Windows 10 version 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fails to handle objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
- CVE-2017-8499High
Microsoft Edge in Windows 10 version 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fails to handle objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability'.
- CVE-2017-8497High
A vulnerability in Microsoft Edge on Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to improper access to objects in memory.
- CVE-2017-8496High
The vulnerability in Microsoft Edge on Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user due to improper access to objects in memory.
- CVE-2017-0266High
A remote code execution vulnerability exists in Microsoft Edge related to how affected Microsoft scripting engines render objects in memory.
- CVE-2017-0240High
A remote code execution vulnerability exists in Microsoft Edge related to the way affected Microsoft scripting engines render when handling objects in memory, known as 'Microsoft Edge Memory Corruption Vulnerability.'
- CVE-2017-0236High
A remote code execution vulnerability exists in Microsoft Edge related to the Chakra JavaScript engine's handling of objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability.'
- CVE-2017-0235High
A remote code execution vulnerability exists in Microsoft Edge related to how the Chakra JavaScript engine handles objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability.'
- CVE-2017-0234High
A remote code execution vulnerability exists in Microsoft Edge related to the way the Chakra JavaScript engine renders when handling objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability.'
- CVE-2017-0233High
An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser.
- CVE-2017-0230High
A remote code execution vulnerability exists in Microsoft Edge related to the way JavaScript engines render when handling objects in memory, known as 'Scripting Engine Memory Corruption Vulnerability.'

