Multiple vulnerabilities have been discovered in Microsoft Edge that could allow for remote code execution. Details of these vulnerabilities are as follows:  

• Four memory corruption vulnerability exists when Microsoft Edge improperly handles objects in memory (CVE-2016-7195, CVE-2016-7196, CVE-2016-7198, CVE-2016-7241)
• Eight scripting engine memory corruption vulnerabilities exist in the way the Chakra JavaScript engine renders when handling objects in memory (CVE-2016-7200, CVE-2016-7201, CVE-2016-7202, CVE-2016-7203, CVE-2016-7208, CVE-2016-7240, CVE-2016-7242, CVE-2016-7243)
• Three information disclosure vulnerability exists when Microsoft Edge improperly handles objects in memory (CVE-2016-7199, CVE-2016-7204, CVE-2016-7227)
• One information disclosure vulnerability exists when Microsoft Edge XSS filter is abused to leak sensitive data (CVE-2016-7239)
• One spoofing vulnerability exists when Microsoft Edge does not properly parse HTTP content. (CVE-2016-7209)

Successful exploitation of these vulnerabilities could result in an attacker gaining the same privileges as the logged on user. Depending on the privileges associated with the user, an attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Customers whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.