cve.bz

microsoft edge vulnerabilities, newest first, page 2

Filter
  1. 6.5CVE-2021-30615EPSS 5.6%

    Chromium: CVE-2021-30615 Cross-origin data leak in Navigation

  2. 8.8CVE-2021-30614EPSS 4.5%

    Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip

  3. 8.8CVE-2021-30613EPSS 4.1%

    Chromium: CVE-2021-30613 Use after free in Base internals

  4. 8.8CVE-2021-30612EPSS 2.8%

    Chromium: CVE-2021-30612 Use after free in WebRTC

  5. 8.8CVE-2021-30611EPSS 2.8%

    Chromium: CVE-2021-30611 Use after free in WebRTC

  6. 8.8CVE-2021-30610EPSS 4.1%

    Chromium: CVE-2021-30610 Use after free in Extensions API

  7. 8.8CVE-2021-30609EPSS 4.1%

    Chromium: CVE-2021-30609 Use after free in Sign-In

  8. 8.8CVE-2021-30608EPSS 4.1%

    Chromium: CVE-2021-30608 Use after free in Web Share

  9. 8.8CVE-2021-30607EPSS 4.1%

    Chromium: CVE-2021-30607 Use after free in Permissions

  10. 8.8CVE-2021-30606EPSS 4.1%

    Chromium: CVE-2021-30606 Use after free in Blink

  11. 6.1CVE-2021-38642EPSS 1.2%

    Microsoft Edge for iOS Spoofing Vulnerability

  12. 6.1CVE-2021-38641EPSS 1.2%

    Microsoft Edge for Android Spoofing Vulnerability

  13. 5.3CVE-2021-36930EPSS 1.1%

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  14. 4.6CVE-2021-26439EPSS 2.9%

    Microsoft Edge for Android Information Disclosure Vulnerability

  15. 6.1CVE-2021-26436EPSS 2.8%

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

  16. 8.8CVE-2021-26411KEVEPSS 82%

    Internet Explorer Memory Corruption Vulnerability

  17. 5.0CVE-2021-24100EPSS 3.1%

    Microsoft Edge for Android Information Disclosure Vulnerability

  18. 8.8CVE-2021-21157EPSS 9.5%

    Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  19. 6.5CVE-2021-21141EPSS 5.4%

    Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass file extension policy via a crafted HTML page.

  20. 6.8CVE-2021-21140EPSS 0.8%

    Uninitialized use in USB in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform out of bounds memory access via via a USB device.

  21. 4.2CVE-2021-1705EPSS 2.1%

    Microsoft Edge (HTML-based) Memory Corruption Vulnerability

  22. 4.3CVE-2020-17153EPSS 2.5%

    Microsoft Edge for Android Spoofing Vulnerability

  23. 4.2CVE-2020-17131EPSS 2.0%

    Chakra Scripting Engine Memory Corruption Vulnerability

  24. 7.5CVE-2020-17058EPSS 3.1%

    Microsoft Browser Memory Corruption Vulnerability

  25. 4.2CVE-2020-17054EPSS 2.1%

    Chakra Scripting Engine Memory Corruption Vulnerability

  26. 7.5CVE-2020-17052EPSS 2.7%

    Scripting Engine Memory Corruption Vulnerability

  27. 4.2CVE-2020-17048EPSS 1.6%

    Chakra Scripting Engine Memory Corruption Vulnerability

  28. 8.8CVE-2020-16009KEVEPSS 48%

    Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

  29. 4.2CVE-2020-1180EPSS 2.1%

    <p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of…

  30. 4.2CVE-2020-1172EPSS 2.2%

    <p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of…

  31. 4.2CVE-2020-1057EPSS 2.2%

    <p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of…

  32. 4.2CVE-2020-16884EPSS 1.8%

    <p>A remote code execution vulnerability exists in the way that the IEToEdge Browser Helper Object (BHO) plugin on Internet Explorer handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could exe…

  33. 4.2CVE-2020-0878KEVEPSS 2.7%

    <p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the curre…

  34. 7.8CVE-2020-1569EPSS 3.0%

    A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the current u…

  35. 7.5CVE-2020-1568EPSS 3.1%

    A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the…

  36. 8.8CVE-2020-1555EPSS 4.5%

    A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code …

  37. 4.3CVE-2020-1462EPSS 4.2%

    An information disclosure vulnerability exists when Skype for Business is accessed via Microsoft Edge (EdgeHTML-based), aka 'Skype for Business via Microsoft Edge (EdgeHTML-based) Information Disclosure Vulnerability'.

  38. 6.5CVE-2020-1433EPSS 5.3%

    An information disclosure vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka 'Microsoft Edge PDF Information Disclosure Vulnerability'.

  39. 5.3CVE-2020-1242EPSS 3.9%

    An information disclosure vulnerability exists in the way that Microsoft Edge handles cross-origin requests, aka 'Microsoft Edge Information Disclosure Vulnerability'.

  40. 6.1CVE-2020-1220EPSS 1.9%

    A spoofing vulnerability exists when theMicrosoft Edge (Chromium-based) in IE Mode improperly handles specific redirects, aka 'Microsoft Edge (Chromium-based) in IE Mode Spoofing Vulnerability'.

  41. 7.5CVE-2020-1219EPSS 19%

    A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerability'.

  42. 8.1CVE-2020-1073EPSS 8.9%

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'.

  43. 3.1CVE-2020-1195EPSS 2.1%

    An elevation of privilege vulnerability exists in Microsoft Edge (Chromium-based) when the Feedback extension improperly validates input. An attacker who successfully exploited this vulnerability could write files to arbitrary locations an…

  44. 4.2CVE-2020-1096EPSS 2.1%

    A remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory. The vulnerability could corrupt memory in such a way that enables an attacker to execute arbitrary code in the context of the…

  45. 4.2CVE-2020-1065EPSS 2.2%

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of th…

  46. 4.3CVE-2020-1059EPSS 2.1%

    A spoofing vulnerability exists when Microsoft Edge does not properly parse HTTP content. An attacker who successfully exploited this vulnerability could trick a user by redirecting the user to a specially crafted website. The specially cr…

  47. 5.4CVE-2020-1056EPSS 2.1%

    An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an attacker to access information from one domain and inject it into another domain. In a web-based attac…

  48. 4.2CVE-2020-1037EPSS 2.2%

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based). The vulnerability could corrupt memory in such a way that an attacker could execute arbitrar…

  49. 7.5CVE-2020-0970EPSS 13%

    A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0968.

  50. 7.5CVE-2020-0969EPSS 13%

    A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based), aka 'Chakra Scripting Engine Memory Corruption Vulnerability'.