Vulnerabilities > Microsoft > Edge > Medium

DATE CVE VULNERABILITY TITLE RISK
2016-07-13 CVE-2016-3244 Improper Access Control vulnerability in Microsoft Edge
Microsoft Edge allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Edge Security Feature Bypass."
network
low complexity
microsoft CWE-284
4.3
2016-06-16 CVE-2016-3215 Information Exposure vulnerability in Microsoft products
Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 1511, and Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted PDF document, aka "Windows PDF Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3201.
local
low complexity
microsoft CWE-200
5.5
2016-06-16 CVE-2016-3201 Information Exposure vulnerability in Microsoft products
Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows 10 Gold and 1511, and Microsoft Edge allow remote attackers to obtain sensitive information from process memory via a crafted PDF document, aka "Windows PDF Information Disclosure Vulnerability," a different vulnerability than CVE-2016-3215.
network
low complexity
microsoft CWE-200
6.5
2016-06-16 CVE-2016-3198 7PK - Security Features vulnerability in Microsoft Edge
Microsoft Edge allows remote attackers to bypass the Content Security Policy (CSP) protection mechanism via a crafted document, aka "Microsoft Edge Security Feature Bypass."
network
low complexity
microsoft CWE-254
6.5
2016-04-12 CVE-2016-0161 7PK - Security Features vulnerability in Microsoft Edge
Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Edge Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0158.
network
low complexity
microsoft CWE-254
6.5
2016-04-12 CVE-2016-0158 7PK - Security Features vulnerability in Microsoft Edge
Microsoft Edge allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Microsoft Edge Elevation of Privilege Vulnerability," a different vulnerability than CVE-2016-0161.
network
low complexity
microsoft CWE-254
6.5
2016-02-10 CVE-2016-0080 Information Exposure vulnerability in Microsoft Edge
Microsoft Edge mishandles exceptions during window-message dispatch operations, which allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Microsoft Edge ASLR Bypass."
network
low complexity
microsoft CWE-200
4.3
2016-02-10 CVE-2016-0077 Data Processing Errors vulnerability in Microsoft Edge and Internet Explorer
Microsoft Internet Explorer 9 through 11 and Microsoft Edge misparse HTTP responses, which allows remote attackers to spoof web sites via a crafted URL, aka "Microsoft Browser Spoofing Vulnerability."
network
low complexity
microsoft CWE-19
4.3