Microsoft Edge vulnerabilities

43 known vulnerabilities affecting microsoft/edge.

Total CVEs
43
CISA KEV
4
actively exploited
Public exploits
0
Exploited in wild
4
Severity breakdown
CRITICAL2HIGH20MEDIUM19LOW2

Vulnerabilities

Page 2 of 3
CVE-2023-28301LOWCVSS 3.7fixed in 112.0.1722.342023-04-11
CVE-2023-28301 [LOW] CWE-20 CVE-2023-28301: Microsoft Edge (Chromium-based) Tampering Vulnerability Microsoft Edge (Chromium-based) Tampering Vulnerability
nvd
CVE-2022-44708HIGHCVSS 8.3fixed in 108.0.1462.422022-12-13
CVE-2022-44708 [HIGH] CVE-2022-44708: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2022-4135CRITICALCVSS 9.6KEVfixed in 107.0.1418.622022-11-25
CVE-2022-4135 [CRITICAL] CWE-787 CVE-2022-4135: Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who h Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2021-38669HIGHCVSS 8.8fixed in 93.0.961.442021-09-15
CVE-2021-38669 [MEDIUM] CVE-2021-38669: Microsoft Edge (Chromium-based) Tampering Vulnerability Microsoft Edge (Chromium-based) Tampering Vulnerability
nvd
CVE-2021-30618HIGHCVSS 8.8≤ 93.0.961.382021-09-03
CVE-2021-30618 [HIGH] CVE-2021-30618: Chromium: CVE-2021-30618 Inappropriate implementation in DevTools Chromium: CVE-2021-30618 Inappropriate implementation in DevTools
nvd
CVE-2021-30622HIGHCVSS 8.8≤ 93.0.961.382021-09-03
CVE-2021-30622 [HIGH] CWE-416 CVE-2021-30622: Chromium: CVE-2021-30622 Use after free in WebApp Installs Chromium: CVE-2021-30622 Use after free in WebApp Installs
nvd
CVE-2021-30608HIGHCVSS 8.8≤ 93.0.961.382021-09-03
CVE-2021-30608 [HIGH] CWE-416 CVE-2021-30608: Chromium: CVE-2021-30608 Use after free in Web Share Chromium: CVE-2021-30608 Use after free in Web Share
nvd
CVE-2021-30613HIGHCVSS 8.8≤ 93.0.961.382021-09-03
CVE-2021-30613 [HIGH] CWE-416 CVE-2021-30613: Chromium: CVE-2021-30613 Use after free in Base internals Chromium: CVE-2021-30613 Use after free in Base internals
nvd
CVE-2021-30614HIGHCVSS 8.8≤ 93.0.961.382021-09-03
CVE-2021-30614 [HIGH] CWE-787 CVE-2021-30614: Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip
nvd
CVE-2021-30620HIGHCVSS 8.8≤ 93.0.961.382021-09-03
CVE-2021-30620 [HIGH] CVE-2021-30620: Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink
nvd
CVE-2021-30610HIGHCVSS 8.8≤ 93.0.961.382021-09-03
CVE-2021-30610 [HIGH] CWE-416 CVE-2021-30610: Chromium: CVE-2021-30610 Use after free in Extensions API Chromium: CVE-2021-30610 Use after free in Extensions API
nvd
CVE-2021-30624HIGHCVSS 8.8≤ 93.0.961.382021-09-03
CVE-2021-30624 [HIGH] CWE-416 CVE-2021-30624: Chromium: CVE-2021-30624 Use after free in Autofill Chromium: CVE-2021-30624 Use after free in Autofill
nvd
CVE-2021-30623HIGHCVSS 8.8≤ 93.0.961.382021-09-03
CVE-2021-30623 [HIGH] CWE-416 CVE-2021-30623: Chromium: CVE-2021-30623 Use after free in Bookmarks Chromium: CVE-2021-30623 Use after free in Bookmarks
nvd
CVE-2021-30609HIGHCVSS 8.8≤ 93.0.961.382021-09-03
CVE-2021-30609 [HIGH] CWE-416 CVE-2021-30609: Chromium: CVE-2021-30609 Use after free in Sign-In Chromium: CVE-2021-30609 Use after free in Sign-In
nvd
CVE-2021-30607HIGHCVSS 8.8≤ 93.0.961.382021-09-03
CVE-2021-30607 [HIGH] CWE-416 CVE-2021-30607: Chromium: CVE-2021-30607 Use after free in Permissions Chromium: CVE-2021-30607 Use after free in Permissions
nvd
CVE-2021-30615MEDIUMCVSS 6.5≤ 93.0.961.382021-09-03
CVE-2021-30615 [MEDIUM] CVE-2021-30615: Chromium: CVE-2021-30615 Cross-origin data leak in Navigation Chromium: CVE-2021-30615 Cross-origin data leak in Navigation
nvd
CVE-2021-36930HIGHCVSS 8.1fixed in 93.0.961.382021-09-02
CVE-2021-36930 [MEDIUM] CWE-269 CVE-2021-36930: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2021-26436HIGHCVSS 8.1fixed in 93.0.961.382021-09-02
CVE-2021-26436 [MEDIUM] CVE-2021-26436: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2021-26439MEDIUMCVSS 5.9fixed in 93.0.961.382021-09-02
CVE-2021-26439 [MEDIUM] CVE-2021-26439: Microsoft Edge for Android Information Disclosure Vulnerability Microsoft Edge for Android Information Disclosure Vulnerability
nvd
CVE-2021-21157HIGHCVSS 8.8fixed in 88.0.705.742021-02-22
CVE-2021-21157 [HIGH] CWE-416 CVE-2021-21157: Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote atta Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
nvd
← Previous2 / 3Next →