ME
Product
Microsoft Edge (EdgeHTML-based)
On CISA KEVExploited in the wildRansomware-linked
760
CVEs
12
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 489Medium 2Low 0
Watch
Add Microsoft Edge (EdgeHTML-based) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2016-0084 | 8.8 | Feb 10 | Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption… Affected: All versions, or not specified |
| CVE-2016-0062 | 8.8 | Feb 10 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2016-0061 | 8.8 | Feb 10 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Affected: All versions, or not specified |
| CVE-2016-0060 | 8.8 | Feb 10 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Affected: All versions, or not specified |
| CVE-2016-0024 | 8.8 | Jan 13 | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Scripting Engine Memory Corruption Vulnerability." Affected: All versions, or not specified |
| CVE-2022-44708 | 8.3 | Dec 13 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Affected: before 108.0.1462.42 |
| CVE-2018-8357 | 8.3 | Aug 15 | An elevation of privilege vulnerability exists in Microsoft browsers allowing sandbox escape, aka "Microsoft Browser Elevation of Privilege Vulnerability." This affects Internet… Affected: All versions, or not specified |
| CVE-2017-0233 | 8.3 | May 12 | An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Microsoft Edge Elevation… Affected: All versions, or not specified |
| CVE-2020-1073 | 8.1 | Jun 9 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: All versions, or not specified |
| CVE-2019-0649 | 8.1 | Mar 5 | A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileged Vulnerability' Affected: All versions, or not specified |
| CVE-2017-0152 | 8.1 | Jul 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engine render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2024-41879 | 7.8 | Aug 26 | Acrobat Reader versions 127.0.2651.105 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current… Affected: before 128.0.2739.42 |
| CVE-2020-1569 | 7.8 | Aug 17 | A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory Affected: All versions, or not specified |
| CVE-2016-3203 | 7.8 | Jun 16 | Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allow remote attackers to execute arbitrary code via a crafted PDF document,… Affected: All versions, or not specified |
| CVE-2020-17058 | 7.5 | Nov 11 | Microsoft Browser Memory Corruption Vulnerability Affected: All versions, or not specified |
| CVE-2020-17052 | 7.5 | Nov 11 | Scripting Engine Memory Corruption Vulnerability Affected: All versions, or not specified |
| CVE-2020-1568 | 7.5 | Aug 17 | A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory Affected: All versions, or not specified |
| CVE-2020-1219 | 7.5 | Jun 9 | A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerability' Affected: All versions, or not specified |
| CVE-2020-0970 | 7.5 | Apr 15 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: All versions, or not specified |
| CVE-2020-0969 | 7.5 | Apr 15 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Chakra Scripting Engine… Affected: All versions, or not specified |
| CVE-2020-0848 | 7.5 | Mar 12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: All versions, or not specified |
| CVE-2020-0831 | 7.5 | Mar 12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: All versions, or not specified |
| CVE-2020-0830 | 7.5 | Mar 12 | A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption… Affected: All versions, or not specified |
| CVE-2020-0829 | 7.5 | Mar 12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: All versions, or not specified |
| CVE-2020-0828 | 7.5 | Mar 12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: All versions, or not specified |
| CVE-2020-0827 | 7.5 | Mar 12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: All versions, or not specified |
| CVE-2020-0826 | 7.5 | Mar 12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: All versions, or not specified |
| CVE-2020-0825 | 7.5 | Mar 12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: All versions, or not specified |
| CVE-2020-0823 | 7.5 | Mar 12 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: All versions, or not specified |
| CVE-2020-0813 | 7.5 | Mar 12 | An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise… Affected: All versions, or not specified |
| CVE-2020-0812 | 7.5 | Mar 12 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka 'Chakra Scripting Engine… Affected: All versions, or not specified |
| CVE-2020-0811 | 7.5 | Mar 12 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka 'Chakra Scripting Engine… Affected: All versions, or not specified |
| CVE-2020-0768 | 7.5 | Mar 12 | A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption… Affected: All versions, or not specified |
| CVE-2020-0767 | 7.5 | Feb 11 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: All versions, or not specified |
| CVE-2020-0713 | 7.5 | Feb 11 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: All versions, or not specified |
| CVE-2020-0712 | 7.5 | Feb 11 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: All versions, or not specified |
| CVE-2020-0711 | 7.5 | Feb 11 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: All versions, or not specified |
| CVE-2020-0710 | 7.5 | Feb 11 | A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability' Affected: All versions, or not specified |
| CVE-2019-1428 | 7.5 | Nov 12 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Scripting Engine Memory Corruption… Affected: All versions, or not specified |
| CVE-2019-1427 | 7.5 | Nov 12 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Scripting Engine Memory Corruption… Affected: All versions, or not specified |
| CVE-2019-1426 | 7.5 | Nov 12 | A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Scripting Engine Memory Corruption… Affected: All versions, or not specified |
| CVE-2019-1366 | 7.5 | Oct 10 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory… Affected: All versions, or not specified |
| CVE-2019-1335 | 7.5 | Oct 10 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory… Affected: All versions, or not specified |
| CVE-2019-1308 | 7.5 | Oct 10 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory… Affected: All versions, or not specified |
| CVE-2019-1307 | 7.5 | Oct 10 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory… Affected: All versions, or not specified |
| CVE-2019-1300 | 7.5 | Sep 11 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory… Affected: All versions, or not specified |
| CVE-2019-1298 | 7.5 | Sep 11 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory… Affected: All versions, or not specified |
| CVE-2019-1237 | 7.5 | Sep 11 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory… Affected: All versions, or not specified |
| CVE-2019-1217 | 7.5 | Sep 11 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory… Affected: All versions, or not specified |
| CVE-2019-1138 | 7.5 | Sep 11 | A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)
