cbcvebase.

Microsoft Edge Chromium vulnerabilities

290 known vulnerabilities affecting microsoft/edge_chromium.

Total CVEs
290
CISA KEV
9
actively exploited
Public exploits
10
Exploited in wild
9
Severity breakdown
CRITICAL14HIGH141MEDIUM127LOW8

Vulnerabilities

Page 10 of 15
CVE-2023-36562P4HIGHCVSS 7.1fixed in 117.0.2045.312023-09-15
CVE-2023-36562 [HIGH] CWE-416 CVE-2023-36562: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2026-57977P4HIGHCVSS 7.1fixed in 150.0.4078.482026-07-03
CVE-2026-57977 [HIGH] CWE-79 CVE-2026-57977: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ed Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2023-21719P3MEDIUMCVSS 6.5fixed in 109.0.1518.702023-01-24
CVE-2023-21719 [MEDIUM] CWE-863 CVE-2023-21719: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
nvd
CVE-2026-66313P4MEDIUMCVSS 6.8fixed in 151.0.4129.592026-08-04
CVE-2026-66313 [MEDIUM] CWE-346 CVE-2026-66313: Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perfor Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.
nvd
CVE-2026-45489P4MEDIUMCVSS 6.5fixed in 150.0.4078.482026-07-03
CVE-2026-45489 [MEDIUM] CWE-749 CVE-2026-45489: Microsoft Edge (Chromium-based) Spoofing Vulnerability Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2025-21185P4MEDIUMCVSS 6.5fixed in 132.0.2957.1152025-01-17
CVE-2025-21185 [MEDIUM] CWE-284 CVE-2025-21185: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2025-47963P4MEDIUMCVSS 6.5fixed in 138.0.3351.552025-07-11
CVE-2025-47963 [MEDIUM] CWE-451 CVE-2025-47963: No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-58291P4MEDIUMCVSS 6.1fixed in 150.0.4078.482026-07-03
CVE-2026-58291 [MEDIUM] CWE-672 CVE-2026-58291: Operation on a resource after expiration or release in Microsoft Edge (Chromium-based) allows an una Operation on a resource after expiration or release in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-65804P4MEDIUMCVSS 6.1fixed in 151.0.4129.592026-08-04
CVE-2026-65804 [MEDIUM] CWE-94 CVE-2026-65804: Improper control of generation of code ('code injection') in Microsoft Edge (Chromium-based) allows Improper control of generation of code ('code injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2023-36022P4MEDIUMCVSS 6.6fixed in 118.0.2088.88fixed in 119.0.2151.442023-11-03
CVE-2023-36022 [MEDIUM] CWE-94 CVE-2023-36022: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2022-23262P4MEDIUMCVSS 6.3fixed in 98.0.1108.432022-02-07
CVE-2022-23262 [MEDIUM] CVE-2022-23262: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2023-36027P4MEDIUMCVSS 6.3fixed in 118.0.2088.102fixed in 119.0.2151.582023-11-10
CVE-2023-36027 [MEDIUM] CVE-2023-36027: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2026-66311P4MEDIUMCVSS 6.2fixed in 151.0.4129.592026-08-04
CVE-2026-66311 [MEDIUM] CWE-862 CVE-2026-66311: Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.
nvd
CVE-2026-66325P4MEDIUMCVSS 6.1fixed in 151.0.4129.592026-08-04
CVE-2026-66325 [MEDIUM] CWE-918 CVE-2026-66325: Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacke Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-66323P4MEDIUMCVSS 5.4fixed in 152.0.4191.532026-08-28
CVE-2026-66323 [MEDIUM] CWE-141 CVE-2026-66323: Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows a Improper neutralization of parameter/argument delimiters in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-70339P4MEDIUMCVSS 5.4fixed in 151.0.4129.782026-08-11
CVE-2026-70339 [MEDIUM] CWE-843 CVE-2026-70339: Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) all Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-45492P4MEDIUMCVSS 5.4fixed in 148.0.3967.702026-05-18
CVE-2026-45492 [MEDIUM] CWE-20 CVE-2026-45492: Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypa Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2023-36008P4MEDIUMCVSS 6.6fixed in 119.0.2151.722023-11-16
CVE-2023-36008 [MEDIUM] CWE-416 CVE-2023-36008: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2024-20675P4MEDIUMCVSS 6.3fixed in 120.0.2210.1332024-01-11
CVE-2024-20675 [MEDIUM] CWE-284 CVE-2024-20675: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
nvd
CVE-2026-58278P4MEDIUMCVSS 5.4fixed in 150.0.4078.482026-07-03
CVE-2026-58278 [MEDIUM] CWE-918 CVE-2026-58278: Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacke Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
← Previous10 / 15Next →
Microsoft Edge Chromium vulnerabilities | cvebase