Microsoft Edge Chromium vulnerabilities
258 known vulnerabilities affecting microsoft/edge_chromium.
Total CVEs
258
CISA KEV
9
actively exploited
Public exploits
9
Exploited in wild
9
Severity breakdown
CRITICAL13HIGH128MEDIUM110LOW7
Vulnerabilities
Page 10 of 13
CVE-2026-58278P4MEDIUMCVSS 5.4fixed in 150.0.4078.482026-07-03
CVE-2026-58278 [MEDIUM] CWE-918 CVE-2026-58278: Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacke
Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2024-49023P4MEDIUMCVSS 5.3fixed in 130.0.2849.462024-10-18
CVE-2024-49023 [MEDIUM] CWE-416 CVE-2024-49023: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2026-42838P4MEDIUMCVSS 5.4fixed in 148.0.3967.552026-05-12
CVE-2026-42838 [MEDIUM] CWE-74 CVE-2026-42838: Improper neutralization of special elements in output used by a downstream component ('injection') i
Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
nvd
CVE-2024-29987P4MEDIUMCVSS 6.5fixed in 124.0.2478.512024-04-18
CVE-2024-29987 [MEDIUM] CWE-359 CVE-2024-29987: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2021-34506P4MEDIUMCVSS 6.1fixed in 91.0.864.592023-07-01
CVE-2021-34506 [MEDIUM] CVE-2021-34506: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
nvd
CVE-2023-36888P4MEDIUMCVSS 6.3fixed in 114.0.1823.822023-07-14
CVE-2023-36888 [MEDIUM] CWE-20 CVE-2023-36888: Microsoft Edge for Android (Chromium-based) Tampering Vulnerability
Microsoft Edge for Android (Chromium-based) Tampering Vulnerability
nvd
CVE-2022-21954P4MEDIUMCVSS 6.1fixed in 97.0.1072.552022-01-11
CVE-2022-21954 [MEDIUM] CVE-2022-21954: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2023-28261P4MEDIUMCVSS 5.7fixed in 110.0.1587.78fixed in 111.0.1661.542023-04-27
CVE-2023-28261 [MEDIUM] CWE-269 CVE-2023-28261: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2026-58300P4MEDIUMCVSS 5.5fixed in 150.0.4078.482026-07-03
CVE-2026-58300 [MEDIUM] CWE-36 CVE-2026-58300: Absolute path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose in
Absolute path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-58522P4MEDIUMCVSS 5.5fixed in 150.0.4078.482026-07-03
CVE-2026-58522 [MEDIUM] CWE-23 CVE-2026-58522: Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose in
Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.
nvd
CVE-2023-29345P4MEDIUMCVSS 6.1fixed in 114.0.1823.372023-06-07
CVE-2023-29345 [MEDIUM] CWE-79 CVE-2023-29345: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
nvd
CVE-2026-45494P4MEDIUMCVSS 6.1fixed in 148.0.3967.702026-05-18
CVE-2026-45494 [MEDIUM] CWE-79 CVE-2026-45494: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2026-58524P4MEDIUMCVSS 6.1fixed in 150.0.4078.482026-07-03
CVE-2026-58524 [MEDIUM] CWE-79 CVE-2026-58524: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ed
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-58298P4MEDIUMCVSS 6.1fixed in 150.0.4078.482026-07-03
CVE-2026-58298 [MEDIUM] CWE-79 CVE-2026-58298: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ed
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2022-23261P4MEDIUMCVSS 5.3fixed in 98.0.1108.432022-02-07
CVE-2022-23261 [MEDIUM] CVE-2022-23261: Microsoft Edge (Chromium-based) Tampering Vulnerability
Microsoft Edge (Chromium-based) Tampering Vulnerability
nvd
CVE-2025-47182P4MEDIUMCVSS 5.6fixed in 138.0.3351.552025-07-11
CVE-2025-47182 [MEDIUM] CWE-20 CVE-2025-47182: Improper input validation in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass
Improper input validation in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass a security feature locally.
nvd
CVE-2025-26643P4MEDIUMCVSS 5.4fixed in 134.0.3124.512025-03-07
CVE-2025-26643 [MEDIUM] CWE-449 CVE-2025-26643: The UI performs the wrong action in Microsoft Edge (Chromium-based) allows an unauthorized attacker
The UI performs the wrong action in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2023-28286P4MEDIUMCVSS 6.1fixed in 110.0.1587.78fixed in 111.0.1661.542023-04-27
CVE-2023-28286 [MEDIUM] CWE-693 CVE-2023-28286: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
nvd
CVE-2021-34475P4MEDIUMCVSS 5.4fixed in 91.0.864.592023-07-01
CVE-2021-34475 [MEDIUM] CVE-2021-34475: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2023-36727P4MEDIUMCVSS 6.1fixed in 117.0.2045.312023-09-15
CVE-2023-36727 [MEDIUM] CVE-2023-36727: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd