Microsoft Corporation Edge
13 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2017-0208 | Edge | An information disclosure vulnerability exists in Microsoft Edge when the Chakra scripting engine does not properly handle objects in memory | MEDIUM 4.3 | 15 % | ||
| CVE-2017-0205 | Edge | A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memo | HIGH 7.5 | 24 % | ||
| CVE-2017-0200 | Edge | A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memo | HIGH 7.5 | 14 % | ||
| CVE-2017-0093 | Edge | A remote code execution vulnerability in Microsoft Edge exists in the way that the Scripting Engine renders when handling objects in memory | HIGH 7.5 | 14 % | ||
| CVE-2017-0140 | Edge | Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Secu | MEDIUM 4.2 | 29 % | ||
| CVE-2017-0135 | Edge | Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Secu | MEDIUM 4.2 | 7.7 % | ||
| CVE-2017-0069 | Edge | Microsoft Edge allows remote attackers to spoof web content via a crafted web site, aka "Microsoft Edge Spoofing Vulnerability." This vulner | MEDIUM 4.3 | 8.6 % | ||
| CVE-2017-0068 | Edge | Browsers in Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft | MEDIUM 4.3 | 15 % | ||
| CVE-2017-0066 | Edge | Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge Secu | MEDIUM 4.2 | 30 % | ||
| CVE-2017-0065 | Edge | Microsoft Edge allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Microsoft Browser In | MEDIUM 4.3 | 27 % | ||
| CVE-2017-0034 | Edge | A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory. The vulnerability could corrupt memo | HIGH 7.5 | 13 % | ||
| CVE-2017-0017 | The RegEx class in the XSS filter in Microsoft Edge | The RegEx class in the XSS filter in Microsoft Edge allows remote attackers to conduct cross-site scripting (XSS) attacks and obtain sensiti | MEDIUM 6.1 | 42 % | ||
| CVE-2017-0011 | Edge | Microsoft Edge allows remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Edge Information Disclosure Vu | MEDIUM 4.3 | 42 % |