U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

National Vulnerability Database

National Vulnerability Database

NVD

National Vulnerability Database
  1. VulnerabilitiesSearch And Statistics

Search Results (Refine Search)

Search Parameters:
  • CPE Product Version: cpe:/a:microsoft:edge:-
There are 518 matching records.
Displaying matches 481 through 500.
Vuln ID Summary CVSS Severity
CVE-2016-0156

Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0155 and CVE-2016-0157.

Published: April 12, 2016; 7:59:20 PM -0400 		V3.0: 7.5 HIGH
 V2.0: 7.6 HIGH
CVE-2016-0155

Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0156 and CVE-2016-0157.

Published: April 12, 2016; 7:59:18 PM -0400 		V3.0: 7.5 HIGH
 V2.0: 7.6 HIGH
CVE-2016-0154

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."

Published: April 12, 2016; 7:59:17 PM -0400 		V3.0: 7.5 HIGH
 V2.0: 7.6 HIGH
CVE-2016-0084

Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability."

Published: February 10, 2016; 6:59:34 AM -0500 		V3.0: 8.8 HIGH
 V2.0: 9.3 HIGH
CVE-2016-0080

Microsoft Edge mishandles exceptions during window-message dispatch operations, which allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Edge ASLR Bypass."

Published: February 10, 2016; 6:59:33 AM -0500 		V3.0: 4.3 MEDIUM
 V2.0: 4.3 MEDIUM
CVE-2016-0077

Microsoft Internet Explorer 9 through 11 and Microsoft Edge misparse HTTP responses, which allows remote attackers to spoof web sites via a crafted URL, aka "Microsoft Browser Spoofing Vulnerability."

Published: February 10, 2016; 6:59:32 AM -0500 		V3.0: 4.3 MEDIUM
 V2.0: 4.3 MEDIUM
CVE-2016-0062

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."

Published: February 10, 2016; 6:59:25 AM -0500 		V3.0: 8.8 HIGH
 V2.0: 9.3 HIGH
CVE-2016-0061

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0060, CVE-2016-0063, CVE-2016-0067, and CVE-2016-0072.

Published: February 10, 2016; 6:59:24 AM -0500 		V3.0: 8.8 HIGH
 V2.0: 9.3 HIGH
CVE-2016-0060

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-0061, CVE-2016-0063, CVE-2016-0067, and CVE-2016-0072.

Published: February 10, 2016; 6:59:23 AM -0500 		V3.0: 8.8 HIGH
 V2.0: 9.3 HIGH
CVE-2016-0024

The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Scripting Engine Memory Corruption Vulnerability."

Published: January 13, 2016; 12:59:17 AM -0500 		V3.0: 8.8 HIGH
 V2.0: 9.3 HIGH
CVE-2016-0003

Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Microsoft Edge Memory Corruption Vulnerability."

Published: January 13, 2016; 12:59:02 AM -0500 		V3.0: 9.6 CRITICAL
 V2.0: 9.3 HIGH
CVE-2015-6176

Microsoft Edge mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS) protection mechanism via unspecified vectors, aka "Microsoft Edge XSS Filter Bypass Vulnerability."

Published: December 09, 2015; 6:59:57 AM -0500 		V3.x:(not available)
 V2.0: 4.3 MEDIUM
CVE-2015-6170

Microsoft Edge allows remote attackers to gain privileges via a crafted web site, aka "Microsoft Browser Elevation of Privilege Vulnerability."

Published: December 09, 2015; 6:59:51 AM -0500 		V3.x:(not available)
 V2.0: 6.8 MEDIUM
CVE-2015-6169

Microsoft Edge misparses HTTP responses, which allows remote attackers to redirect users to arbitrary web sites via unspecified vectors, aka "Microsoft Edge Spoofing Vulnerability."

Published: December 09, 2015; 6:59:50 AM -0500 		V3.x:(not available)
 V2.0: 4.3 MEDIUM
CVE-2015-6168

Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6153.

Published: December 09, 2015; 6:59:49 AM -0500 		V3.x:(not available)
 V2.0: 9.3 HIGH
CVE-2015-6159

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6142, CVE-2015-6143, CVE-2015-6153, CVE-2015-6158, and CVE-2015-6160.

Published: December 09, 2015; 6:59:43 AM -0500 		V3.x:(not available)
 V2.0: 9.3 HIGH
CVE-2015-6158

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6142, CVE-2015-6143, CVE-2015-6153, CVE-2015-6159, and CVE-2015-6160.

Published: December 09, 2015; 6:59:42 AM -0500 		V3.x:(not available)
 V2.0: 9.3 HIGH
CVE-2015-6155

Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."

Published: December 09, 2015; 6:59:39 AM -0500 		V3.x:(not available)
 V2.0: 9.3 HIGH
CVE-2015-6154

Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6150.

Published: December 09, 2015; 6:59:38 AM -0500 		V3.x:(not available)
 V2.0: 9.3 HIGH
CVE-2015-6153

Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6142, CVE-2015-6143, CVE-2015-6158, CVE-2015-6159, and CVE-2015-6160.

Published: December 09, 2015; 6:59:37 AM -0500 		V3.x:(not available)
 V2.0: 9.3 HIGH