Read the docs

Microsoft

Records18046All Threatist records
Exploited (KEV)406In CISA KEV
CVSS critical2330CVSS 9.0–10.0
CVSS high10410CVSS 7.0–8.9

Exploited now

Microsoft records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

255 records in Chakracore · all components

Priority CRITICAL 92KEV

<p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.02696 Published 2020-09-11 Fixed in publication CWE-787
TI-2018-06000 CVE-2018-8298 · GHSA-wgw2-wwq8-c7wf

Type confusion in Microsoft ChakraCore

Priority CRITICAL 92KEV

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.74694 Published 2018-07-11 Fixed in 1.10.1 CWE-843
TI-2019-00333 CVE-2019-0539 · GHSA-3w4v-qfqc-3433

Out-of-bounds write in Microsoft Edge

Priority HIGH 74

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.82902 Published 2019-01-08 Fixed in 1.11.5 CWE-787
TI-2019-00359 CVE-2019-0567 · GHSA-6x4f-5v4h-r29j

Out-of-bounds write in Microsoft Edge

Priority HIGH 73

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.80126 Published 2019-01-08 Fixed in 1.11.5 CWE-787
TI-2018-00721 CVE-2018-0777 · GHSA-xxqm-xpq7-prvx

Out-of-bounds write in Microsoft Edge

Priority HIGH 73

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memor…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.78434 Published 2018-01-04 No fix listed CWE-787
TI-2018-00720 CVE-2018-0776 · GHSA-qh4c-h6pf-q28g

Out-of-bounds write in Microsoft Edge

Priority HIGH 73

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memor…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.78434 Published 2018-01-04 No fix listed CWE-787
TI-2018-00714 CVE-2018-0770 · GHSA-5qh9-fjw3-p55r

Out-of-bounds write in Microsoft Edge

Priority HIGH 73

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memor…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.78434 Published 2018-01-04 No fix listed CWE-787
TI-2018-00713 CVE-2018-0769 · GHSA-h3c3-xcgq-6vr8

Out-of-bounds write in Microsoft Edge

Priority HIGH 73

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memor…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.78954 Published 2018-01-04 No fix listed CWE-787
TI-2018-00703 CVE-2018-0758 · GHSA-c98h-p8mv-3hjc

Out-of-bounds write in Microsoft Edge

Priority HIGH 73

Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memor…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.80799 Published 2018-01-04 No fix listed CWE-787
TI-2019-00360 CVE-2019-0568 · GHSA-2m5h-6g38-jjf2

Out-of-bounds write in Microsoft Edge

Priority HIGH 70

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.69455 Published 2019-01-08 Fixed in 1.11.5 CWE-787
TI-2018-06147 CVE-2018-8467 · GHSA-xxp7-423f-hcp4

Out-of-bounds write in Microsoft Edge

Priority HIGH 70

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.69019 Published 2018-09-13 Fixed in 1.11.1 CWE-787
TI-2018-06146 CVE-2018-8466 · GHSA-4c93-q79v-mw45

Out-of-bounds write in Microsoft Edge

Priority HIGH 70

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.69019 Published 2018-09-13 Fixed in 1.11.1 CWE-787
Priority HIGH 70

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Expl…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.67896 Published 2018-08-15 Fixed in 1.10.2 CWE-787
TI-2018-05995 CVE-2018-8291 · GHSA-j67m-wpv6-pv44

Type confusion in Microsoft ChakraCore

Priority HIGH 70

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Expl…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.69224 Published 2018-07-11 Fixed in 1.10.1 CWE-843
Priority HIGH 70

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Expl…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.69224 Published 2018-07-11 Fixed in 1.10.1 CWE-787
TI-2018-05984 CVE-2018-8279 · GHSA-qx2v-2m6g-2vh6

Type confusion in Microsoft Edge

Priority HIGH 70

A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore.

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.70729 Published 2018-07-11 No fix listed CWE-843
TI-2018-05950 CVE-2018-8229 · GHSA-jv5x-p843-g4qr

Type confusion in Microsoft Edge

Priority HIGH 70

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.70581 Published 2018-06-14 Fixed in 1.8.5 CWE-843
TI-2018-00719 CVE-2018-0775 · GHSA-xcmg-9w5x-w5m2

Out-of-bounds write in Microsoft Edge

Priority HIGH 70

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulner…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.6787 Published 2018-01-04 No fix listed CWE-787
TI-2018-00718 CVE-2018-0774 · GHSA-2qm4-8qh4-4729

Out-of-bounds write in Microsoft Edge

Priority HIGH 70

Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulner…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.6787 Published 2018-01-04 No fix listed CWE-787
Priority HIGH 70

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handles objects…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.68491 Published 2017-12-12 Fixed in 1.7.5 CWE-119
Priority HIGH 70

ChakraCore and Microsoft Edge in Windows 10 1511, 1607, 1703, 1709, Windows Server 2016 and Windows Server, version 1709 allows an attacker to gain the same user rights as the current user, due to how the scripting engin…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.69802 Published 2017-11-15 No fix listed CWE-119
Priority HIGH 70

ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handl…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.68027 Published 2017-10-13 No fix listed CWE-119
Priority HIGH 70

ChakraCore and Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting engine handl…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.69163 Published 2017-10-13 No fix listed CWE-119
Priority HIGH 69

An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data, aka "Chakra…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.66639 Published 2018-05-09 Fixed in 1.8.4 CWE-200
TI-2018-05887 CVE-2018-8139 · GHSA-5hxp-3237-j2hp

Out-of-bounds read in Microsoft Edge

Priority HIGH 69

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCo…

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.66313 Published 2018-05-09 Fixed in 1.8.4 CWE-125
Load more
Open these records in search →