ME
Product
Microsoft Edge (EdgeHTML-based)
On CISA KEVExploited in the wildRansomware-linked
760
CVEs
12
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 489Medium 2Low 0
Watch
Add Microsoft Edge (EdgeHTML-based) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-8634 | 7.5 | Aug 8 | Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way that Microsoft browser JavaScript… Affected: All versions, or not specified |
| CVE-2017-8619 | 7.5 | Jul 11 | Microsoft Edge on Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows a remote code execution vulnerability in the way affected Microsoft scripting engines… Affected: All versions, or not specified |
| CVE-2017-8617 | 7.5 | Jul 11 | Microsoft Edge in Windows 10 1703 Microsoft Edge allows a remote code execution vulnerability in the way affected Microsoft scripting engines render when handling objects in… Affected: All versions, or not specified |
| CVE-2017-8610 | 7.5 | Jul 11 | Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the JavaScript engine fails to render when… Affected: All versions, or not specified |
| CVE-2017-8609 | 7.5 | Jul 11 | Microsoft Internet Explorer in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current… Affected: All versions, or not specified |
| CVE-2017-8608 | 7.5 | Jul 11 | Microsoft browsers in Microsoft Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server… Affected: All versions, or not specified |
| CVE-2017-8607 | 7.5 | Jul 11 | Microsoft browsers in Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and… Affected: All versions, or not specified |
| CVE-2017-8606 | 7.5 | Jul 11 | Microsoft browsers in Microsoft Windows 7, Windows Server 2008 and R2, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and… Affected: All versions, or not specified |
| CVE-2017-8605 | 7.5 | Jul 11 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the… Affected: All versions, or not specified |
| CVE-2017-8604 | 7.5 | Jul 11 | Microsoft Edge in Microsoft Windows 10 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the… Affected: All versions, or not specified |
| CVE-2017-8603 | 7.5 | Jul 11 | Microsoft Edge in Microsoft Windows 10 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the… Affected: All versions, or not specified |
| CVE-2017-8601 | 7.5 | Jul 11 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the… Affected: All versions, or not specified |
| CVE-2017-8598 | 7.5 | Jul 11 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the… Affected: All versions, or not specified |
| CVE-2017-8596 | 7.5 | Jul 11 | Microsoft Edge in Microsoft Windows 10 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the JavaScript… Affected: All versions, or not specified |
| CVE-2017-8595 | 7.5 | Jul 11 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to execute arbitrary code in the context of the current user when the… Affected: All versions, or not specified |
| CVE-2017-8549 | 7.5 | Jun 15 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system when… Affected: All versions, or not specified |
| CVE-2017-8548 | 7.5 | Jun 15 | Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to obtain information to further compromise the user's system when… Affected: All versions, or not specified |
| CVE-2017-8524 | 7.5 | Jun 15 | Microsoft browsers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and… Affected: All versions, or not specified |
| CVE-2017-8522 | 7.5 | Jun 15 | Microsoft browsers in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an allow an… Affected: All versions, or not specified |
| CVE-2017-8521 | 7.5 | Jun 15 | Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fails to handle objects… Affected: All versions, or not specified |
| CVE-2017-8520 | 7.5 | Jun 15 | Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fails to handle objects… Affected: All versions, or not specified |
| CVE-2017-8499 | 7.5 | Jun 15 | Microsoft Edge in Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user when the Edge JavaScript scripting engine fails to handle objects… Affected: All versions, or not specified |
| CVE-2017-8497 | 7.5 | Jun 15 | Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microsoft Edge improperly accesses… Affected: All versions, or not specified |
| CVE-2017-8496 | 7.5 | Jun 15 | Microsoft Edge in Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user when Microsoft Edge improperly accesses… Affected: All versions, or not specified |
| CVE-2017-0266 | 7.5 | May 12 | A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory, aka "Microsoft Edge Remote… Affected: All versions, or not specified |
| CVE-2017-0240 | 7.5 | May 12 | A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory, aka "Microsoft Edge Memory… Affected: All versions, or not specified |
| CVE-2017-0238 | 7.5 | May 12 | A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript scripting engines handle objects in memory, aka "Scripting Engine Memory Corruption… Affected: All versions, or not specified |
| CVE-2017-0236 | 7.5 | May 12 | A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory… Affected: All versions, or not specified |
| CVE-2017-0235 | 7.5 | May 12 | A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory… Affected: All versions, or not specified |
| CVE-2017-0234 | 7.5 | May 12 | A remote code execution vulnerability exists in Microsoft Edge in the way that the Chakra JavaScript engine renders when handling objects in memory, aka "Scripting Engine Memory… Affected: All versions, or not specified |
| CVE-2017-0230 | 7.5 | May 12 | A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka "Scripting Engine Memory Corruption… Affected: All versions, or not specified |
| CVE-2017-0229 | 7.5 | May 12 | A remote code execution vulnerability exists in Microsoft Edge in the way JavaScript engines render when handling objects in memory, aka "Scripting Engine Memory Corruption… Affected: All versions, or not specified |
| CVE-2017-0228 | 7.5 | May 12 | A remote code execution vulnerability exists in Microsoft browsers in the way JavaScript engines render when handling objects in memory, aka "Scripting Engine Memory Corruption… Affected: All versions, or not specified |
| CVE-2017-0227 | 7.5 | May 12 | A remote code execution vulnerability exists in Microsoft Edge in the way affected Microsoft scripting engines render when handling objects in memory, aka "Microsoft Edge Memory… Affected: All versions, or not specified |
| CVE-2017-0224 | 7.5 | May 12 | A remote code execution vulnerability exists in the way JavaScript engines render when handling objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption… Affected: All versions, or not specified |
| CVE-2017-0221 | 7.5 | May 12 | A vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This CVE ID is unique from CVE-2017-0227… Affected: All versions, or not specified |
| CVE-2017-0205 | 7.5 | Apr 12 | A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory Affected: All versions, or not specified |
| CVE-2017-0200 | 7.5 | Apr 12 | A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory Affected: All versions, or not specified |
| CVE-2017-0093 | 7.5 | Apr 12 | A remote code execution vulnerability in Microsoft Edge exists in the way that the Scripting Engine renders when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0151 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0150 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0141 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0138 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0137 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0136 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0134 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0133 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0132 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0131 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0094 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)
