Microsoft Edge vulnerabilities
43 known vulnerabilities affecting microsoft/edge.
Total CVEs
43
CISA KEV
4
actively exploited
Public exploits
2
Exploited in wild
4
Severity breakdown
CRITICAL2HIGH20MEDIUM19LOW2
Vulnerabilities
Page 2 of 3
CVE-2021-36930P3HIGHCVSS 8.1fixed in 93.0.961.382021-09-02
CVE-2021-36930 [HIGH] CWE-269 CVE-2021-36930: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2026-26133P3HIGHCVSS 7.1fixed in 145.3800.992026-03-16
CVE-2026-26133 [HIGH] CWE-77 CVE-2026-26133: AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a
AI command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2021-21141P3MEDIUMCVSS 6.5fixed in 88.0.705.742021-02-09
CVE-2021-21141 [MEDIUM] CWE-74 CVE-2021-21141: Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a
Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass file extension policy via a crafted HTML page.
nvd
CVE-2021-30615P3MEDIUMCVSS 6.5≤ 93.0.961.382021-09-03
CVE-2021-30615 [MEDIUM] CVE-2021-30615: Chromium: CVE-2021-30615 Cross-origin data leak in Navigation
Chromium: CVE-2021-30615 Cross-origin data leak in Navigation
nvd
CVE-2024-38222P4MEDIUMCVSS 6.5fixed in 128.0.2739.422024-09-12
CVE-2024-38222 [MEDIUM] CWE-276 CVE-2024-38222: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2021-26439P4MEDIUMCVSS 5.9fixed in 93.0.961.382021-09-02
CVE-2021-26439 [MEDIUM] CVE-2021-26439: Microsoft Edge for Android Information Disclosure Vulnerability
Microsoft Edge for Android Information Disclosure Vulnerability
nvd
CVE-2024-38103P4MEDIUMCVSS 5.9fixed in 127.0.2651.742024-07-25
CVE-2024-38103 [MEDIUM] CWE-359 CVE-2024-38103: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2021-21140P4MEDIUMCVSS 6.8fixed in 88.0.705.742021-02-09
CVE-2021-21140 [MEDIUM] CWE-119 CVE-2021-21140: Uninitialized use in USB in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentia
Uninitialized use in USB in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform out of bounds memory access via via a USB device.
nvd
CVE-2024-38156P4MEDIUMCVSS 6.1fixed in 126.0.2592.1022024-07-19
CVE-2024-38156 [MEDIUM] CWE-79 CVE-2024-38156: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2025-47967P4MEDIUMCVSS 4.7fixed in 140.0.3485.712025-09-16
CVE-2025-47967 [MEDIUM] CWE-357 CVE-2025-47967: Insufficient ui warning of dangerous operations in Microsoft Edge for Android allows an unauthorized
Insufficient ui warning of dangerous operations in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2024-26247P4MEDIUMCVSS 4.7fixed in 123.0.2420.532024-03-22
CVE-2024-26247 [MEDIUM] CWE-269 CVE-2024-26247: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
nvd
CVE-2025-49736P4MEDIUMCVSS 4.3fixed in 139.0.3405.862025-08-12
CVE-2025-49736 [MEDIUM] CWE-449 CVE-2025-49736: The ui performs the wrong action in Microsoft Edge for Android allows an unauthorized attacker to pe
The ui performs the wrong action in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2024-38082P4MEDIUMCVSS 4.7fixed in 126.0.2592.682024-06-20
CVE-2024-38082 [MEDIUM] CWE-451 CVE-2024-38082: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2025-25001P4MEDIUMCVSS 4.3fixed in 132.0.2957.1182025-04-04
CVE-2025-25001 [MEDIUM] CWE-79 CVE-2025-25001: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ed
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2023-28284P4MEDIUMCVSS 4.3fixed in 112.0.1722.342023-04-11
CVE-2023-28284 [MEDIUM] CWE-693 CVE-2023-28284: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
nvd
CVE-2024-29057P4MEDIUMCVSS 4.3fixed in 123.0.2420.532024-03-22
CVE-2024-29057 [MEDIUM] CWE-357 CVE-2024-29057: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2023-36029P4MEDIUMCVSS 4.3fixed in 118.0.2088.882023-11-03
CVE-2023-36029 [MEDIUM] CVE-2023-36029: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2024-26188P4MEDIUMCVSS 4.3fixed in 122.0.2365.522024-02-23
CVE-2024-26188 [MEDIUM] CWE-357 CVE-2024-26188: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2024-38093P4MEDIUMCVSS 4.3fixed in 126.0.2592.682024-06-20
CVE-2024-38093 [MEDIUM] CWE-451 CVE-2024-38093: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2026-32187P4MEDIUMCVSS 4.2fixed in 146.0.3856.842026-03-27
CVE-2026-32187 [MEDIUM] CWE-1021 CVE-2026-32187: Microsoft Edge (Chromium-based) Defense in Depth Vulnerability
Microsoft Edge (Chromium-based) Defense in Depth Vulnerability
nvd