) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.
Search Results (Refine Search)
- Keyword (text search): cpe:2.3:a:microsoft:edge:-:*:*:*:*:*:*:*
- CPE Name Search: true
| Vuln ID | Summary | CVSS Severity |
|---|---|---|
| CVE-2015-6058 |
Microsoft Edge mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS) protection mechanism via unspecified vectors, aka "Microsoft Edge XSS Filter Bypass." Published: October 13, 2015; 9:59:28 PM -0400 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
| CVE-2015-6057 |
Microsoft Edge allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft Edge Information Disclosure Vulnerability." Published: October 13, 2015; 9:59:27 PM -0400 |
V3.x:(not available) V2.0: 5.0 MEDIUM |
| CVE-2015-2542 |
Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability." Published: September 08, 2015; 8:59:49 PM -0400 |
V3.x:(not available) V2.0: 9.3 HIGH |
| CVE-2015-2494 |
Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2486, CVE-2015-2487, CVE-2015-2490, CVE-2015-2492, CVE-2015-2498, and CVE-2015-2499. Published: September 08, 2015; 8:59:12 PM -0400 |
V3.x:(not available) V2.0: 9.3 HIGH |
| CVE-2015-2486 |
Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2487, CVE-2015-2490, CVE-2015-2492, CVE-2015-2494, CVE-2015-2498, and CVE-2015-2499. Published: September 08, 2015; 8:59:04 PM -0400 |
V3.x:(not available) V2.0: 9.3 HIGH |
| CVE-2015-2485 |
Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2491 and CVE-2015-2541. Published: September 08, 2015; 8:59:03 PM -0400 |
V3.x:(not available) V2.0: 9.3 HIGH |
| CVE-2015-2449 |
Microsoft Internet Explorer 7 through 11 and Edge allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "ASLR Bypass." Published: August 14, 2015; 6:59:08 AM -0400 |
V3.x:(not available) V2.0: 4.3 MEDIUM |
| CVE-2015-2446 |
Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2447. Published: August 14, 2015; 6:59:05 AM -0400 |
V3.x:(not available) V2.0: 9.3 HIGH |
| CVE-2015-2442 |
Microsoft Internet Explorer 8 through 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2444. Published: August 14, 2015; 6:59:01 AM -0400 |
V3.x:(not available) V2.0: 9.3 HIGH |
| CVE-2015-2441 |
Microsoft Internet Explorer 7 through 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2452. Published: August 14, 2015; 6:59:00 AM -0400 |
V3.x:(not available) V2.0: 9.3 HIGH |