Microsoft Edge — known CVE vulnerabilities

Every CVE whose affected-product data names Microsoft Edge, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (200)

• CVE-2017-0028 — CVSS 9.8 (critical): A remote code execution vulnerability exists when Microsoft scripting engine improperly accesses objects in memory. The vulnerability could…
• CVE-2015-0311 — CVSS 9.8 (critical) — actively exploited: Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and…
• CVE-2017-0252 — CVSS 9.8 (critical): A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory…
• CVE-2015-0313 — CVSS 9.8 (critical) — actively exploited: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before…
• CVE-2017-0223 — CVSS 9.8 (critical): A remote code execution vulnerability exists in Microsoft Chakra Core in the way JavaScript engines render when handling objects in memory…
• CVE-2024-7971 — CVSS 9.6 (critical) — actively exploited: Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page…
• CVE-2016-0003 — CVSS 9.6 (critical): Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Microsoft Edge Memory Corruption…
• CVE-2022-4135 — CVSS 9.6 (critical) — actively exploited: Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to…
• CVE-2015-6073 — CVSS 9.3 (critical): Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory…
• CVE-2015-6078 — CVSS 9.3 (critical): Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2015-2485 — CVSS 9.3 (critical): Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2015-6064 — CVSS 9.3 (critical): Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2015-2442 — CVSS 9.3 (critical): Microsoft Internet Explorer 8 through 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory…
• CVE-2015-6168 — CVSS 9.3 (critical): Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site…
• CVE-2015-6139 — CVSS 9.3 (critical): Microsoft Internet Explorer 11 and Microsoft Edge mishandle content types, which allows remote attackers to execute arbitrary web script in…
• CVE-2015-6140 — CVSS 9.3 (critical): Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory…
• CVE-2015-6142 — CVSS 9.3 (critical): Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory…
• CVE-2015-6151 — CVSS 9.3 (critical): Microsoft Internet Explorer 8 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2015-6153 — CVSS 9.3 (critical): Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory…
• CVE-2015-6154 — CVSS 9.3 (critical): Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2015-6159 — CVSS 9.3 (critical): Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory…
• CVE-2015-2441 — CVSS 9.3 (critical): Microsoft Internet Explorer 7 through 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory…
• CVE-2015-6155 — CVSS 9.3 (critical): Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2015-6158 — CVSS 9.3 (critical): Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory…
• CVE-2015-2542 — CVSS 9.3 (critical): Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2015-2486 — CVSS 9.3 (critical): Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2015-2494 — CVSS 9.3 (critical): Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2015-2446 — CVSS 9.3 (critical): Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption)…
• CVE-2019-0938 — CVSS 9.0 (critical): An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in…
• CVE-2021-30622 — CVSS 8.8 (high): Chromium: CVE-2021-30622 Use after free in WebApp Installs
• CVE-2016-3248 — CVSS 8.8 (high): The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11…
• CVE-2016-3259 — CVSS 8.8 (high): The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 9 through 11…
• CVE-2016-3260 — CVSS 8.8 (high): The Microsoft (1) JScript 9, (2) VBScript, and (3) Chakra JavaScript engines, as used in Microsoft Internet Explorer 11, Microsoft Edge…
• CVE-2016-0084 — CVSS 8.8 (high): Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site…
• CVE-2016-3265 — CVSS 8.8 (high): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory…
• CVE-2021-30609 — CVSS 8.8 (high): Chromium: CVE-2021-30609 Use after free in Sign-In
• CVE-2016-3269 — CVSS 8.8 (high): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory…
• CVE-2021-30608 — CVSS 8.8 (high): Chromium: CVE-2021-30608 Use after free in Web Share
• CVE-2021-30607 — CVSS 8.8 (high): Chromium: CVE-2021-30607 Use after free in Permissions
• CVE-2021-30606 — CVSS 8.8 (high): Chromium: CVE-2021-30606 Use after free in Blink
• CVE-2021-26411 — CVSS 8.8 (high) — actively exploited: Internet Explorer Memory Corruption Vulnerability
• CVE-2021-21157 — CVSS 8.8 (high): Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap…
• CVE-2016-3297 — CVSS 8.8 (high): Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2020-16009 — CVSS 8.8 (high) — actively exploited: Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption…
• CVE-2020-1555 — CVSS 8.8 (high): A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge (HTML-based)…
• CVE-2021-30618 — CVSS 8.8 (high): Chromium: CVE-2021-30618 Inappropriate implementation in DevTools
• CVE-2020-0816 — CVSS 8.8 (high): A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory…
• CVE-2019-1140 — CVSS 8.8 (high): A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge…
• CVE-2023-5217 — CVSS 8.8 (high) — actively exploited: Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to…
• CVE-2019-0566 — CVSS 8.8 (high): An elevation of privilege vulnerability exists in Microsoft Edge Browser Broker COM object, aka "Microsoft Edge Elevation of Privilege…
• CVE-2021-30616 — CVSS 8.8 (high): Chromium: CVE-2021-30616 Use after free in Media
• CVE-2021-30614 — CVSS 8.8 (high): Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip
• CVE-2017-8660 — CVSS 8.8 (high): Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the…
• CVE-2016-0061 — CVSS 8.8 (high): Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2016-0062 — CVSS 8.8 (high): Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory…
• CVE-2021-30613 — CVSS 8.8 (high): Chromium: CVE-2021-30613 Use after free in Base internals
• CVE-2016-3199 — CVSS 8.8 (high): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory…
• CVE-2021-30612 — CVSS 8.8 (high): Chromium: CVE-2021-30612 Use after free in WebRTC
• CVE-2017-0002 — CVSS 8.8 (high): Microsoft Edge allows remote attackers to bypass the Same Origin Policy via vectors involving the about:blank URL and data: URLs, aka…
• CVE-2016-3214 — CVSS 8.8 (high): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory…
• CVE-2021-30611 — CVSS 8.8 (high): Chromium: CVE-2021-30611 Use after free in WebRTC
• CVE-2016-3222 — CVSS 8.8 (high): Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site…
• CVE-2021-30610 — CVSS 8.8 (high): Chromium: CVE-2021-30610 Use after free in Extensions API
• CVE-2021-30620 — CVSS 8.8 (high): Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink
• CVE-2021-30624 — CVSS 8.8 (high): Chromium: CVE-2021-30624 Use after free in Autofill
• CVE-2021-30623 — CVSS 8.8 (high): Chromium: CVE-2021-30623 Use after free in Bookmarks
• CVE-2017-8503 — CVSS 8.8 (high): Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to escape from the AppContainer…
• CVE-2016-7200 — CVSS 8.8 (high) — actively exploited: The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2016-7201 — CVSS 8.8 (high) — actively exploited: The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2016-0024 — CVSS 8.8 (high): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via unspecified vectors, aka "Scripting…
• CVE-2016-0060 — CVSS 8.8 (high): Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2022-44708 — CVSS 8.3 (high): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
• CVE-2017-0233 — CVSS 8.3 (high): An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in…
• CVE-2018-8357 — CVSS 8.3 (high): An elevation of privilege vulnerability exists in Microsoft browsers allowing sandbox escape, aka "Microsoft Browser Elevation of Privilege…
• CVE-2017-0152 — CVSS 8.1 (high): A remote code execution vulnerability exists in the way affected Microsoft scripting engine render when handling objects in memory in…
• CVE-2017-0037 — CVSS 8.1 (high) — actively exploited: Microsoft Internet Explorer 10 and 11 and Microsoft Edge have a type confusion issue in the Layout::MultiColumnBoxBuilder::HandleColumnBreak…
• CVE-2020-1056 — CVSS 8.1 (high): An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, which could allow an…
• CVE-2019-0649 — CVSS 8.1 (high): A vulnerability exists in Microsoft Chakra JIT server, aka 'Scripting Engine Elevation of Privileged Vulnerability'.
• CVE-2020-1073 — CVSS 8.1 (high): A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting…
• CVE-2024-41879 — CVSS 7.8 (high): Acrobat Reader versions 127.0.2651.105 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code…
• CVE-2016-3203 — CVSS 7.8 (high): Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allow remote attackers to execute…
• CVE-2020-1569 — CVSS 7.8 (high): A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt…
• CVE-2019-0780 — CVSS 7.5 (high): A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory…
• CVE-2016-0102 — CVSS 7.5 (high): Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory…
• CVE-2016-0105 — CVSS 7.5 (high): Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2016-0109 — CVSS 7.5 (high): Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory…
• CVE-2016-0110 — CVSS 7.5 (high): Microsoft Internet Explorer 10 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2016-0111 — CVSS 7.5 (high): Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2016-0116 — CVSS 7.5 (high): Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site…
• CVE-2016-0123 — CVSS 7.5 (high): Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site…
• CVE-2016-0124 — CVSS 7.5 (high): Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site…
• CVE-2016-0129 — CVSS 7.5 (high): Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site…
• CVE-2016-0130 — CVSS 7.5 (high): Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site…
• CVE-2016-0154 — CVSS 7.5 (high): Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2016-0155 — CVSS 7.5 (high): Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site…
• CVE-2016-0156 — CVSS 7.5 (high): Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site…
• CVE-2016-0157 — CVSS 7.5 (high): Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site…
• CVE-2016-0186 — CVSS 7.5 (high): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory…
• CVE-2016-0191 — CVSS 7.5 (high): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory…
• CVE-2016-0192 — CVSS 7.5 (high): Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2016-0193 — CVSS 7.5 (high): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory…
• CVE-2016-1096 — CVSS 7.5 (high): Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer…
• CVE-2016-1097 — CVSS 7.5 (high): Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer…
• CVE-2016-1098 — CVSS 7.5 (high): Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer…
• CVE-2016-1099 — CVSS 7.5 (high): Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer…
• CVE-2016-1100 — CVSS 7.5 (high): Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer…
• CVE-2016-1101 — CVSS 7.5 (high): Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer…
• CVE-2016-1102 — CVSS 7.5 (high): Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer…
• CVE-2016-1103 — CVSS 7.5 (high): Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer…
• CVE-2016-1104 — CVSS 7.5 (high): Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer…
• CVE-2016-1105 — CVSS 7.5 (high): Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer…
• CVE-2016-1106 — CVSS 7.5 (high): Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer…
• CVE-2016-1107 — CVSS 7.5 (high): Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer…
• CVE-2016-1108 — CVSS 7.5 (high): Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer…
• CVE-2016-1109 — CVSS 7.5 (high): Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer…
• CVE-2016-1110 — CVSS 7.5 (high): Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer…
• CVE-2016-3246 — CVSS 7.5 (high): Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site…
• CVE-2016-3247 — CVSS 7.5 (high): Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory…
• CVE-2016-3264 — CVSS 7.5 (high): Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2016-3289 — CVSS 7.5 (high): Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser…
• CVE-2016-3293 — CVSS 7.5 (high): Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft…
• CVE-2016-3294 — CVSS 7.5 (high): Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site…
• CVE-2016-3295 — CVSS 7.5 (high): Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2016-3296 — CVSS 7.5 (high): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting…
• CVE-2016-3322 — CVSS 7.5 (high): Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser…
• CVE-2016-3330 — CVSS 7.5 (high): Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site…
• CVE-2016-3331 — CVSS 7.5 (high): Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory…
• CVE-2016-3350 — CVSS 7.5 (high): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory…
• CVE-2016-3377 — CVSS 7.5 (high): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory…
• CVE-2016-3382 — CVSS 7.5 (high): The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or…
• CVE-2016-3386 — CVSS 7.5 (high): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory…
• CVE-2016-3387 — CVSS 7.5 (high): Microsoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to private namespaces, which allows remote…
• CVE-2016-3389 — CVSS 7.5 (high): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory…
• CVE-2016-3390 — CVSS 7.5 (high): The scripting engines in Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a…
• CVE-2016-4108 — CVSS 7.5 (high): Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer…
• CVE-2016-4109 — CVSS 7.5 (high): Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer…
• CVE-2016-4110 — CVSS 7.5 (high): Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer…
• CVE-2016-4111 — CVSS 7.5 (high): Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer…
• CVE-2016-4112 — CVSS 7.5 (high): Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer…
• CVE-2016-4113 — CVSS 7.5 (high): Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer…
• CVE-2016-4114 — CVSS 7.5 (high): Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer…
• CVE-2016-4115 — CVSS 7.5 (high): Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer…
• CVE-2016-4116 — CVSS 7.5 (high): Unspecified vulnerability in Adobe Flash Player 21.0.0.213 and earlier, as used in the Adobe Flash libraries in Microsoft Internet Explorer…
• CVE-2016-7181 — CVSS 7.5 (high): Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site…
• CVE-2016-7189 — CVSS 7.5 (high): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting…
• CVE-2016-7190 — CVSS 7.5 (high): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory…
• CVE-2016-7194 — CVSS 7.5 (high): The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory…
• CVE-2016-7195 — CVSS 7.5 (high): Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2016-7196 — CVSS 7.5 (high): Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2016-7198 — CVSS 7.5 (high): Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2016-7202 — CVSS 7.5 (high): The scripting engines in Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or…
• CVE-2016-7203 — CVSS 7.5 (high): The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2016-7208 — CVSS 7.5 (high): The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2016-7240 — CVSS 7.5 (high): The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2016-7241 — CVSS 7.5 (high): Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory…
• CVE-2016-7242 — CVSS 7.5 (high): The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2016-7243 — CVSS 7.5 (high): The Chakra JavaScript scripting engine in Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2016-7279 — CVSS 7.5 (high): Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service…
• CVE-2017-8670 — CVSS 7.5 (high): Microsoft Edge in Microsoft Windows 10 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the context of…
• CVE-2017-8671 — CVSS 7.5 (high): Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the…
• CVE-2017-8672 — CVSS 7.5 (high): Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the…
• CVE-2017-8674 — CVSS 7.5 (high): Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user due to the way…
• CVE-2017-8728 — CVSS 7.5 (high): Microsoft Windows PDF Library in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703…
• CVE-2017-8729 — CVSS 7.5 (high): Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way…
• CVE-2017-8731 — CVSS 7.5 (high): Microsoft Edge in Microsoft Windows 10 1607 and Windows Server 2016 allows an attacker to execute arbitrary code in the context of the…
• CVE-2017-8734 — CVSS 7.5 (high): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the…
• CVE-2017-8737 — CVSS 7.5 (high): Microsoft Windows PDF Library in Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703…
• CVE-2017-8738 — CVSS 7.5 (high): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and Windows Server 2016 allows an attacker to execute arbitrary code in the…
• CVE-2017-8740 — CVSS 7.5 (high): Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way…
• CVE-2017-8741 — CVSS 7.5 (high): Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and…
• CVE-2017-8748 — CVSS 7.5 (high): Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and…
• CVE-2017-8750 — CVSS 7.5 (high): Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, and…
• CVE-2017-8751 — CVSS 7.5 (high): Microsoft Edge in Microsoft Windows 1703 allows an attacker to execute arbitrary code in the context of the current user, due to the way…
• CVE-2017-8752 — CVSS 7.5 (high): Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the…
• CVE-2017-8753 — CVSS 7.5 (high): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the…
• CVE-2017-8755 — CVSS 7.5 (high): Microsoft Edge in Microsoft Windows 10 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the…
• CVE-2017-8756 — CVSS 7.5 (high): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the…
• CVE-2017-8757 — CVSS 7.5 (high): Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016 allows an attacker to execute arbitrary code in the…
• CVE-2018-0758 — CVSS 7.5 (high): Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the…
• CVE-2018-0762 — CVSS 7.5 (high): Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2…
• CVE-2018-0768 — CVSS 7.5 (high): Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting…
• CVE-2018-0769 — CVSS 7.5 (high): Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the…
• CVE-2018-0770 — CVSS 7.5 (high): Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the…
• CVE-2018-0772 — CVSS 7.5 (high): Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2…
• CVE-2018-0773 — CVSS 7.5 (high): Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting…
• CVE-2018-0774 — CVSS 7.5 (high): Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting…
• CVE-2018-0775 — CVSS 7.5 (high): Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting…
• CVE-2018-0776 — CVSS 7.5 (high): Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the…
• CVE-2018-0777 — CVSS 7.5 (high): Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the…
• CVE-2018-0778 — CVSS 7.5 (high): Microsoft Edge in Windows 10 1709 allows an attacker to execute arbitrary code in the context of the current user, due to how the scripting…
• CVE-2018-0781 — CVSS 7.5 (high): Microsoft Edge in Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows an attacker to execute arbitrary code in the…
• CVE-2018-0834 — CVSS 7.5 (high): Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution…
• CVE-2018-0835 — CVSS 7.5 (high): Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution…
• CVE-2018-0836 — CVSS 7.5 (high): Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles…
• CVE-2018-0837 — CVSS 7.5 (high): Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution…
• CVE-2018-0838 — CVSS 7.5 (high): Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution…
• CVE-2018-0840 — CVSS 7.5 (high): Internet Explorer in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, and…
• CVE-2018-0856 — CVSS 7.5 (high): Microsoft Edge and ChakraCore in Microsoft Windows 10 1703 and 1709 allows remote code execution, due to how the scripting engine handles…
• CVE-2018-0857 — CVSS 7.5 (high): Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution…
• CVE-2018-0859 — CVSS 7.5 (high): Microsoft Edge and ChakraCore in Microsoft Windows 10 Gold, 1511, 1607, 1703, 1709, and Windows Server 2016 allows remote code execution…