Edge

edge

Vendor: Microsoft • 757 CVEs

CVEs (757)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2016-3325 1Microsoft 2Edge Internet Explorer May 6, 2026 Sep 14, 2016 N/A· v4 3.1 LOW· v3 2.6 LOW· v2 Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."
CVE-2016-3297 1Microsoft 2Edge Internet Explorer May 6, 2026 Sep 14, 2016 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corrupti...Show more Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."Show less
CVE-2016-3295 1Microsoft 2Edge Internet Explorer May 6, 2026 Sep 14, 2016 N/A· v4 7.5 HIGH· v3 5.1 MEDIUM· v2 Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption...Show more Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."Show less
CVE-2016-3294 1Microsoft 1Edge May 6, 2026 Sep 14, 2016 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability," a different vulnerability th...Show more Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Edge Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3330.Show less
CVE-2016-3291 1Microsoft 2Edge Internet Explorer May 6, 2026 Sep 14, 2016 N/A· v4 2.4 LOW· v3 2.6 LOW· v2 Microsoft Internet Explorer 11 and Microsoft Edge mishandle cross-origin requests, which allows remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulne...Show more Microsoft Internet Explorer 11 and Microsoft Edge mishandle cross-origin requests, which allows remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."Show less
CVE-2016-3247 1Microsoft 2Edge Internet Explorer May 6, 2026 Sep 14, 2016 N/A· v4 7.5 HIGH· v3 5.1 MEDIUM· v2 Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnera...Show more Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."Show less
CVE-2016-7153 5Apple GoogleMicrosoft+2 more 6Chrome EdgeFirefox+3 more May 6, 2026 Sep 6, 2016 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser c...Show more The HTTP/2 protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack.Show less
CVE-2016-7152 5Apple GoogleMicrosoft+2 more 6Chrome EdgeFirefox+3 more May 6, 2026 Sep 6, 2016 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser co...Show more The HTTPS protocol does not consider the role of the TCP congestion window in providing information about content length, which makes it easier for remote attackers to obtain cleartext data by leveraging a web-browser configuration in which third-party cookies are sent, aka a "HEIST" attack.Show less
CVE-2016-3329 1Microsoft 2Edge Internet Explorer May 6, 2026 Aug 9, 2016 N/A· v4 5.3 MEDIUM· v3 2.6 LOW· v2 Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to determine the existence of files via a crafted webpage, aka "Internet Explorer Information Disclosure Vulnerability."
CVE-2016-3327 1Microsoft 2Edge Internet Explorer May 6, 2026 Aug 9, 2016 N/A· v4 5.3 MEDIUM· v3 2.6 LOW· v2 Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Microsoft Browser Information Disclosure Vulnerability," a different vulnerability tha...Show more Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Microsoft Browser Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3326.Show less
CVE-2016-3326 1Microsoft 2Edge Internet Explorer May 6, 2026 Aug 9, 2016 N/A· v4 5.3 MEDIUM· v3 2.6 LOW· v2 Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Microsoft Browser Information Disclosure Vulnerability," a different vulnerability tha...Show more Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to obtain sensitive information via a crafted web page, aka "Microsoft Browser Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3327.Show less
CVE-2016-3322 1Microsoft 2Edge Internet Explorer May 6, 2026 Aug 9, 2016 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3289.
CVE-2016-3319 1Microsoft 4Edge Windows 10Windows 8.1+1 more May 6, 2026 Aug 9, 2016 N/A· v4 7.0 HIGH· v3 9.3 HIGH· v2 The PDF library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allows remote attackers to execute arbitrary code via a crafted PDF file, aka "Microsoft PDF Remote...Show more The PDF library in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allows remote attackers to execute arbitrary code via a crafted PDF file, aka "Microsoft PDF Remote Code Execution Vulnerability."Show less
CVE-2016-3296 1Microsoft 1Edge May 6, 2026 Aug 9, 2016 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 The Chakra JavaScript engine in Microsoft Edge allows remote attackers to execute arbitrary code via a crafted web site, aka "Scripting Engine Memory Corruption Vulnerability."
CVE-2016-3293 1Microsoft 2Edge Internet Explorer May 6, 2026 Aug 9, 2016 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 Microsoft Internet Explorer 9 through 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memory Corruption Vulnerability."
CVE-2016-3289 1Microsoft 2Edge Internet Explorer May 6, 2026 Aug 9, 2016 N/A· v4 7.5 HIGH· v3 7.6 HIGH· v2 Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code via a crafted web page, aka "Microsoft Browser Memory Corruption Vulnerability," a different vulnerability than CVE-2016-3322.
CVE-2016-3277 1Microsoft 2Edge Internet Explorer May 6, 2026 Jul 13, 2016 N/A· v4 5.3 MEDIUM· v3 2.6 LOW· v2 Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."
CVE-2016-3274 1Microsoft 2Edge Internet Explorer May 6, 2026 Jul 13, 2016 N/A· v4 3.1 LOW· v3 2.6 LOW· v2 Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to conduct content-spoofing attacks via a crafted URL, aka "Microsoft Browser Spoofing Vulnerability."
CVE-2016-3273 1Microsoft 2Edge Internet Explorer May 6, 2026 Jul 13, 2016 N/A· v4 5.3 MEDIUM· v3 2.6 LOW· v2 The XSS Filter in Microsoft Internet Explorer 9 through 11 and Microsoft Edge does not properly restrict JavaScript code, which allows remote attackers to obtain sensitive information via a crafted web site, aka "Microso...Show more The XSS Filter in Microsoft Internet Explorer 9 through 11 and Microsoft Edge does not properly restrict JavaScript code, which allows remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."Show less
CVE-2016-3271 1Microsoft 1Edge May 6, 2026 Jul 13, 2016 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The VBScript engine in Microsoft Edge allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Scripting Engine Information Disclosure Vulnerability."

Previous 1...323334...38 Next