CVE & Exploit Intelligence Database

CVE-2019-0539 7.5 HIGH 4 PoCs Analysis EPSS 0.91

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0567, CVE-2019-0568.

CWE-787 Jan 08, 2019

CVE-2018-8617 7.5 HIGH 3 PoCs Analysis EPSS 0.90

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8583, CVE-2018-8618, CVE-2018-8624, CVE-2018-8629.

CWE-787 Dec 12, 2018

CVE-2018-12086 7.5 HIGH 1 PoC Analysis EPSS 0.26

Buffer overflow in OPC UA applications allows remote attackers to trigger a stack overflow with carefully structured requests.

CWE-787 Sep 14, 2018

CVE-2018-8467 7.5 HIGH 1 PoC Analysis EPSS 0.80

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8367, CVE-2018-8465, CVE-2018-8466.

CWE-787 Sep 13, 2018

CVE-2018-8466 7.5 HIGH 1 PoC Analysis EPSS 0.78

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8367, CVE-2018-8465, CVE-2018-8467.

CWE-787 Sep 13, 2018

CVE-2018-8269 7.5 HIGH 1 PoC Analysis EPSS 0.25

A denial of service vulnerability exists when OData Library improperly handles web requests, aka "OData Denial of Service Vulnerability." This affects Microsoft.Data.OData.

Sep 13, 2018

CVE-2018-8384 7.5 HIGH 1 PoC Analysis EPSS 0.81

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8266, CVE-2018-8380, CVE-2018-8381.

CWE-843 Aug 15, 2018

CVE-2018-8355 7.5 HIGH 1 PoC Analysis EPSS 0.80

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8353, CVE-2018-8359, CVE-2018-8371, CVE-2018-8372, CVE-2018-8373, CVE-2018-8385, CVE-2018-8389, CVE-2018-8390.

CWE-787 Aug 15, 2018

CVE-2018-14042 6.1 MEDIUM 1 PoC Analysis EPSS 0.02

In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.

CWE-79 Jul 13, 2018

CVE-2018-14041 6.1 MEDIUM 1 PoC Analysis EPSS 0.08

In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.

CWE-79 Jul 13, 2018

CVE-2018-14040 6.1 MEDIUM 2 PoCs Analysis EPSS 0.02

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.

CWE-79 Jul 13, 2018

CVE-2018-8298 7.5 HIGH KEV 1 PoC Analysis EPSS 0.90

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore. This CVE ID is unique from CVE-2018-8242, CVE-2018-8283, CVE-2018-8287, CVE-2018-8288, CVE-2018-8291, CVE-2018-8296.

CWE-843 Jul 11, 2018

CVE-2018-8291 7.5 HIGH 1 PoC Analysis EPSS 0.83

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8242, CVE-2018-8283, CVE-2018-8287, CVE-2018-8288, CVE-2018-8296, CVE-2018-8298.

CWE-843 Jul 11, 2018

CVE-2018-8288 7.5 HIGH 1 PoC Analysis EPSS 0.83

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka "Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge. This CVE ID is unique from CVE-2018-8242, CVE-2018-8283, CVE-2018-8287, CVE-2018-8291, CVE-2018-8296, CVE-2018-8298.

CWE-787 Jul 11, 2018

CVE-2018-8229 7.5 HIGH 1 PoC Analysis EPSS 0.81

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8227.

CWE-843 Jun 14, 2018

CVE-2018-8145 7.5 HIGH 1 PoC Analysis EPSS 0.72

An information disclosure vulnerability exists when Chakra improperly discloses the contents of its memory, which could provide an attacker with information to further compromise the user's computer or data, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects ChakraCore, Internet Explorer 11, Microsoft Edge, Internet Explorer 10. This CVE ID is unique from CVE-2018-0943, CVE-2018-8130, CVE-2018-8133, CVE-2018-8177.

CWE-200 May 09, 2018

CVE-2018-8139 7.5 HIGH 1 PoC Analysis EPSS 0.77

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0945, CVE-2018-0946, CVE-2018-0951, CVE-2018-0953, CVE-2018-0954, CVE-2018-0955, CVE-2018-1022, CVE-2018-8114, CVE-2018-8122, CVE-2018-8128, CVE-2018-8137.

CWE-125 May 09, 2018

CVE-2018-8133 7.5 HIGH EXPLOITED 1 PoC Analysis EPSS 0.62

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0943, CVE-2018-8130, CVE-2018-8145, CVE-2018-8177.

CWE-843 May 09, 2018

CVE-2018-0946 7.5 HIGH 1 PoC Analysis EPSS 0.64

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0945, CVE-2018-0951, CVE-2018-0953, CVE-2018-0954, CVE-2018-0955, CVE-2018-1022, CVE-2018-8114, CVE-2018-8122, CVE-2018-8128, CVE-2018-8137, CVE-2018-8139.

CWE-416 May 09, 2018

CVE-2018-0980 7.5 HIGH 1 PoC Analysis EPSS 0.77

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0979, CVE-2018-0990, CVE-2018-0993, CVE-2018-0994, CVE-2018-0995, CVE-2018-1019.

CWE-787 Apr 12, 2018