) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Search Results (Refine Search)
- Keyword (text search): cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*
- CPE Name Search: true
| Vuln ID | Summary | CVSS Severity |
|---|---|---|
| CVE-2016-0024 |
The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Scripting Engine Memory Corruption Vulnerability." Published: January 13, 2016; 12:59:17 AM -0500 |
V3.0: 8.8 HIGH V2.0: 9.3 HIGH |
| CVE-2016-0003 |
Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Microsoft Edge Memory Corruption Vulnerability." Published: January 13, 2016; 12:59:02 AM -0500 |
V3.0: 9.6 CRITICAL V2.0: 9.3 HIGH |
| CVE-2015-6176 |
Microsoft Edge mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS) protection mechanism via unspecified vectors, aka "Microsoft Edge XSS Filter Bypass Vulnerability." Published: December 09, 2015; 6:59:57 AM -0500 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
| CVE-2015-6170 |
Microsoft Edge allows remote attackers to gain privileges via a crafted web site, aka "Microsoft Browser Elevation of Privilege Vulnerability." Published: December 09, 2015; 6:59:51 AM -0500 |
V3.x:(not available) V2.0: 6.8 MEDIUM |
| CVE-2015-6169 |
Microsoft Edge misparses HTTP responses, which allows remote attackers to redirect users to arbitrary web sites via unspecified vectors, aka "Microsoft Edge Spoofing Vulnerability." Published: December 09, 2015; 6:59:50 AM -0500 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
| CVE-2015-6168 |
Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6153. Published: December 09, 2015; 6:59:49 AM -0500 |
V3.x:(not available) V2.0: 9.3 HIGH |
| CVE-2015-6159 |
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6142, CVE-2015-6143, CVE-2015-6153, CVE-2015-6158, and CVE-2015-6160. Published: December 09, 2015; 6:59:43 AM -0500 |
V3.x:(not available) V2.0: 9.3 HIGH |
| CVE-2015-6158 |
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6142, CVE-2015-6143, CVE-2015-6153, CVE-2015-6159, and CVE-2015-6160. Published: December 09, 2015; 6:59:42 AM -0500 |
V3.x:(not available) V2.0: 9.3 HIGH |
| CVE-2015-6155 |
Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability." Published: December 09, 2015; 6:59:39 AM -0500 |
V3.x:(not available) V2.0: 9.3 HIGH |
| CVE-2015-6154 |
Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6150. Published: December 09, 2015; 6:59:38 AM -0500 |
V3.x:(not available) V2.0: 9.3 HIGH |
| CVE-2015-6153 |
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6142, CVE-2015-6143, CVE-2015-6158, CVE-2015-6159, and CVE-2015-6160. Published: December 09, 2015; 6:59:37 AM -0500 |
V3.x:(not available) V2.0: 9.3 HIGH |
| CVE-2015-6151 |
Microsoft Internet Explorer 8 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6083. Published: December 09, 2015; 6:59:35 AM -0500 |
V3.x:(not available) V2.0: 9.3 HIGH |
| CVE-2015-6142 |
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6140, CVE-2015-6143, CVE-2015-6153, CVE-2015-6158, CVE-2015-6159, and CVE-2015-6160. Published: December 09, 2015; 6:59:25 AM -0500 |
V3.x:(not available) V2.0: 9.3 HIGH |
| CVE-2015-6140 |
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6142, CVE-2015-6143, CVE-2015-6153, CVE-2015-6158, CVE-2015-6159, and CVE-2015-6160. Published: December 09, 2015; 6:59:23 AM -0500 |
V3.x:(not available) V2.0: 9.3 HIGH |
| CVE-2015-6139 |
Microsoft Internet Explorer 11 and Microsoft Edge mishandle content types, which allows remote attackers to execute arbitrary web script in a privileged context via a crafted web site, aka "Microsoft Browser Elevation of Privilege Vulnerability." Published: December 09, 2015; 6:59:22 AM -0500 |
V3.x:(not available) V2.0: 9.3 HIGH |
| CVE-2015-6088 |
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Browser ASLR Bypass." Published: November 11, 2015; 7:59:28 AM -0500 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
| CVE-2015-6078 |
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6065. Published: November 11, 2015; 7:59:20 AM -0500 |
V3.x:(not available) V2.0: 9.3 HIGH |
| CVE-2015-6073 |
Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6068, CVE-2015-6072, CVE-2015-6075, CVE-2015-6077, CVE-2015-6079, CVE-2015-6080, and CVE-2015-6082. Published: November 11, 2015; 7:59:15 AM -0500 |
V3.x:(not available) V2.0: 9.3 HIGH |
| CVE-2015-6064 |
Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2015-6084 and CVE-2015-6085. Published: November 11, 2015; 6:59:34 AM -0500 |
V3.x:(not available) V2.0: 9.3 HIGH |
| CVE-2015-6058 |
Microsoft Edge mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS) protection mechanism via unspecified vectors, aka "Microsoft Edge XSS Filter Bypass." Published: October 13, 2015; 9:59:28 PM -0400 |
V3.x:(not available) V2.0: 4.3 MEDIUM |