<< Back
CVE Number Vulnerability Product Severity Date
MS15-091 Cumulative Security Update for Microsoft Edge (3084525) Windows 10 Critical 12-08-2015

Technical Information

Brief overview of the risk:
This security update resolves vulnerabilities in Microsoft Edge. The most severe of the vulnerabilities could allow remote code execution if a user views a specially crafted webpage using Microsoft Edge.

Detailed Information on the risk:

Remote code execution vulnerabilities exist when Microsoft Edge improperly accesses objects in memory. These vulnerabilities could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user.
An attacker could host a specially crafted website that is designed to exploit these vulnerabilities through Microsoft Edge, and then convince a user to view the website. The attacker could also take advantage of compromised websites and websites that accept or host user-provided content or advertisements by adding specially crafted content that could exploit these vulnerabilities.

Further information on this exploit is available at : MS15-091

Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems

Affected Software

Windows 10 for 32-bit Systems
Windows 10 for x64-based Systems