ME
Product
Microsoft Edge (EdgeHTML-based)
On CISA KEVExploited in the wildRansomware-linked
760
CVEs
12
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 9High 489Medium 2Low 0
Watch
Add Microsoft Edge (EdgeHTML-based) to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-0151 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0150 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0141 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0138 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0137 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0136 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0134 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0133 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0132 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0131 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0094 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0071 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0070 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0067 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0035 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0034 | 7.5 | Mar 17 | A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory Affected: All versions, or not specified |
| CVE-2017-0032 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0023 | 7.5 | Mar 17 | The PDF library in Microsoft Edge; Windows 8.1; Windows Server 2012 and R2; Windows RT 8.1; and Windows 10, 1511, and 1607 allows remote attackers to execute arbitrary code via a… Affected: All versions, or not specified |
| CVE-2017-0015 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2017-0010 | 7.5 | Mar 17 | A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in Microsoft browsers Affected: All versions, or not specified |
| CVE-2016-7297 | 7.5 | Dec 20 | The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting… Affected: All versions, or not specified |
| CVE-2016-7296 | 7.5 | Dec 20 | The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting… Affected: All versions, or not specified |
| CVE-2016-7288 | 7.5 | Dec 20 | The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting… Affected: All versions, or not specified |
| CVE-2016-7287 | 7.5 | Dec 20 | The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Affected: All versions, or not specified |
| CVE-2016-7286 | 7.5 | Dec 20 | The scripting engines in Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Scripting… Affected: All versions, or not specified |
| CVE-2016-7279 | 7.5 | Dec 20 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Affected: All versions, or not specified |
| CVE-2016-7181 | 7.5 | Dec 20 | Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption… Affected: All versions, or not specified |
| CVE-2016-7243 | 7.5 | Nov 10 | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site,… Affected: All versions, or not specified |
| CVE-2016-7242 | 7.5 | Nov 10 | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site,… Affected: All versions, or not specified |
| CVE-2016-7241 | 7.5 | Nov 10 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2016-7240 | 7.5 | Nov 10 | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site,… Affected: All versions, or not specified |
| CVE-2016-7208 | 7.5 | Nov 10 | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site,… Affected: All versions, or not specified |
| CVE-2016-7203 | 7.5 | Nov 10 | The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site,… Affected: All versions, or not specified |
| CVE-2016-7202 | 7.5 | Nov 10 | The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: All versions, or not specified |
| CVE-2016-7198 | 7.5 | Nov 10 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Affected: All versions, or not specified |
| CVE-2016-7196 | 7.5 | Nov 10 | Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site,… Affected: All versions, or not specified |
| CVE-2016-7195 | 7.5 | Nov 10 | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web… Affected: All versions, or not specified |
| CVE-2016-7194 | 7.5 | Oct 14 | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2016-7190 | 7.5 | Oct 14 | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2016-7189 | 7.5 | Oct 14 | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Remote Code Execution Vulnerability." Affected: All versions, or not specified |
| CVE-2016-3390 | 7.5 | Oct 14 | The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a… Affected: All versions, or not specified |
| CVE-2016-3389 | 7.5 | Oct 14 | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2016-3387 | 7.5 | Oct 14 | Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote attackers to gain privileges via unspecified… Affected: All versions, or not specified |
| CVE-2016-3386 | 7.5 | Oct 14 | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2016-3382 | 7.5 | Oct 14 | The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory… Affected: All versions, or not specified |
| CVE-2016-3331 | 7.5 | Oct 14 | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2016-3377 | 7.5 | Sep 14 | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2016-3350 | 7.5 | Sep 14 | The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka… Affected: All versions, or not specified |
| CVE-2016-3330 | 7.5 | Sep 14 | Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption… Affected: All versions, or not specified |
| CVE-2016-3295 | 7.5 | Sep 14 | Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site,… Affected: All versions, or not specified |
The 500 most important CVEs for this product (exploited first, then by severity)