Microsoft Edge Chromium vulnerabilities
258 known vulnerabilities affecting microsoft/edge_chromium.
Total CVEs
258
CISA KEV
9
actively exploited
Public exploits
9
Exploited in wild
9
Severity breakdown
CRITICAL13HIGH128MEDIUM110LOW7
Vulnerabilities
Page 11 of 13
CVE-2024-30056P4MEDIUMCVSS 5.4fixed in 124.0.2478.1092024-05-25
CVE-2024-30056 [MEDIUM] CWE-359 CVE-2024-30056: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2025-53791P4MEDIUMCVSS 4.7fixed in 140.0.3485.542025-09-05
CVE-2025-53791 [MEDIUM] CWE-284 CVE-2025-53791: Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass
Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2021-36929P4MEDIUMCVSS 5.5fixed in 92.0.902.552021-08-26
CVE-2021-36929 [MEDIUM] CVE-2021-36929: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2023-24935P4MEDIUMCVSS 6.1fixed in 112.0.5615.492023-04-11
CVE-2023-24935 [MEDIUM] CWE-601 CVE-2023-24935: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2023-44323P4MEDIUMCVSS 5.5fixed in 118.0.2088.762023-10-30
CVE-2023-44323 [MEDIUM] CWE-416 CVE-2023-44323: Adobe Acrobat for Edge version 118.0.2088.46 (and earlier) is affected by a Use After Free vulnerabi
Adobe Acrobat for Edge version 118.0.2088.46 (and earlier) is affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
nvd
CVE-2022-41035P4MEDIUMCVSS 5.3fixed in 106.0.1370.342022-10-11
CVE-2022-41035 [MEDIUM] CWE-362 CVE-2022-41035: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2024-43580P4MEDIUMCVSS 5.4fixed in 130.0.2849.462024-10-17
CVE-2024-43580 [MEDIUM] CWE-357 CVE-2024-43580: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2024-26163P4MEDIUMCVSS 4.7fixed in 122.0.2365.922024-03-14
CVE-2024-26163 [MEDIUM] CWE-693 CVE-2024-26163: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
nvd
CVE-2024-29991P4MEDIUMCVSS 5.0fixed in 124.0.2478.512024-04-19
CVE-2024-29991 [MEDIUM] CWE-94 CVE-2024-29991: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
nvd
CVE-2026-0385P4MEDIUMCVSS 5.0fixed in 146.0.3856.592026-03-16
CVE-2026-0385 [MEDIUM] CWE-451 CVE-2026-0385: Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
nvd
CVE-2023-21720P4MEDIUMCVSS 5.3fixed in 109.0.15.18.782023-02-14
CVE-2023-21720 [MEDIUM] CWE-126 CVE-2023-21720: Microsoft Edge (Chromium-based) Tampering Vulnerability
Microsoft Edge (Chromium-based) Tampering Vulnerability
nvd
CVE-2024-30055P4MEDIUMCVSS 5.4fixed in 124.0.2478.972024-05-14
CVE-2024-30055 [MEDIUM] CWE-451 CVE-2024-30055: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2024-29986P4MEDIUMCVSS 5.4fixed in 124.0.2478.512024-04-18
CVE-2024-29986 [MEDIUM] CWE-359 CVE-2024-29986: Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2024-30058P4MEDIUMCVSS 5.4fixed in 126.0.2592.562024-06-13
CVE-2024-30058 [MEDIUM] CWE-357 CVE-2024-30058: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2024-21337P4MEDIUMCVSS 5.2fixed in 120.0.2210.1332024-01-11
CVE-2024-21337 [MEDIUM] CWE-122 CVE-2024-21337: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2022-21931P4MEDIUMCVSS 4.2fixed in 97.0.1072.552022-01-11
CVE-2022-21931 [MEDIUM] CVE-2022-21931: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2022-21930P4MEDIUMCVSS 4.2fixed in 97.0.1072.552022-01-11
CVE-2022-21930 [MEDIUM] CVE-2022-21930: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2024-20721P4MEDIUMCVSS 5.5fixed in 120.0.2210.1332024-01-15
CVE-2024-20721 [MEDIUM] CWE-20 CVE-2024-20721: Acrobat Reader T5 (MSFT Edge) versions 120.0.2210.91 and earlier are affected by an Improper Input V
Acrobat Reader T5 (MSFT Edge) versions 120.0.2210.91 and earlier are affected by an Improper Input Validation vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a mal
nvd
CVE-2024-20709P4MEDIUMCVSS 5.5fixed in 120.0.2210.1332024-01-15
CVE-2024-20709 [MEDIUM] CWE-20 CVE-2024-20709: Acrobat Reader T5 (MSFT Edge) versions 120.0.2210.91 and earlier are affected by an Improper Input V
Acrobat Reader T5 (MSFT Edge) versions 120.0.2210.91 and earlier are affected by an Improper Input Validation vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a mal
nvd
CVE-2023-29354P4MEDIUMCVSS 4.7fixed in 113.0.1774.352023-05-05
CVE-2023-29354 [MEDIUM] CWE-693 CVE-2023-29354: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
nvd