cbcvebase.

Microsoft Edge Chromium vulnerabilities

290 known vulnerabilities affecting microsoft/edge_chromium.

Total CVEs
290
CISA KEV
9
actively exploited
Public exploits
10
Exploited in wild
9
Severity breakdown
CRITICAL14HIGH141MEDIUM127LOW8

Vulnerabilities

Page 11 of 15
CVE-2026-62904P4MEDIUMCVSS 5.4fixed in 152.0.4191.532026-08-28
CVE-2026-62904 [MEDIUM] CWE-863 CVE-2026-62904: Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclo Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2024-49023P4MEDIUMCVSS 5.3fixed in 130.0.2849.462024-10-18
CVE-2024-49023 [MEDIUM] CWE-416 CVE-2024-49023: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2026-42838P4MEDIUMCVSS 5.4fixed in 148.0.3967.552026-05-12
CVE-2026-42838 [MEDIUM] CWE-74 CVE-2026-42838: Improper neutralization of special elements in output used by a downstream component ('injection') i Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
nvd
CVE-2024-29987P4MEDIUMCVSS 6.5fixed in 124.0.2478.512024-04-18
CVE-2024-29987 [MEDIUM] CWE-359 CVE-2024-29987: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2023-36409P4MEDIUMCVSS 6.5fixed in 118.0.2088.462023-11-07
CVE-2023-36409 [MEDIUM] CVE-2023-36409: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2024-38207P4MEDIUMCVSS 6.3fixed in 128.0.2739.422024-08-23
CVE-2024-38207 [MEDIUM] CWE-843 CVE-2024-38207: Microsoft Edge (HTML-based) Memory Corruption Vulnerability Microsoft Edge (HTML-based) Memory Corruption Vulnerability
nvd
CVE-2026-66314P4MEDIUMCVSS 5.3fixed in 151.0.4129.592026-08-04
CVE-2026-66314 [MEDIUM] CWE-367 CVE-2026-66314: Time-of-check time-of-use (toctou) race condition in Microsoft Edge (Chromium-based) allows an unaut Time-of-check time-of-use (toctou) race condition in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2021-34506P4MEDIUMCVSS 6.1fixed in 91.0.864.592023-07-01
CVE-2021-34506 [MEDIUM] CVE-2021-34506: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
nvd
CVE-2023-36888P4MEDIUMCVSS 6.3fixed in 114.0.1823.822023-07-14
CVE-2023-36888 [MEDIUM] CWE-20 CVE-2023-36888: Microsoft Edge for Android (Chromium-based) Tampering Vulnerability Microsoft Edge for Android (Chromium-based) Tampering Vulnerability
nvd
CVE-2026-70309P4MEDIUMCVSS 5.4fixed in 150.0.4078.652026-08-28
CVE-2026-70309 [MEDIUM] CWE-346 CVE-2026-70309: Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2022-21954P4MEDIUMCVSS 6.1fixed in 97.0.1072.552022-01-11
CVE-2022-21954 [MEDIUM] CVE-2022-21954: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2026-77490P4MEDIUMCVSS 6.1fixed in 151.0.4129.1072026-09-11
CVE-2026-77490 [MEDIUM] CWE-79 CVE-2026-77490: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ed Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-58524P4MEDIUMCVSS 6.1fixed in 150.0.4078.482026-07-03
CVE-2026-58524 [MEDIUM] CWE-79 CVE-2026-58524: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ed Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-58298P4MEDIUMCVSS 6.1fixed in 150.0.4078.482026-07-03
CVE-2026-58298 [MEDIUM] CWE-79 CVE-2026-58298: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ed Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-58300P4MEDIUMCVSS 5.5fixed in 150.0.4078.482026-07-03
CVE-2026-58300 [MEDIUM] CWE-36 CVE-2026-58300: Absolute path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose in Absolute path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.
nvd
CVE-2026-70331P4MEDIUMCVSS 5.4fixed in 150.0.4078.502026-08-28
CVE-2026-70331 [MEDIUM] CWE-1427 CVE-2026-70331: Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthor Improper neutralization of input used for llm prompting in Microsoft Edge for iOS allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-66322P4MEDIUMCVSS 5.4fixed in 151.0.4129.592026-08-04
CVE-2026-66322 [MEDIUM] CWE-346 CVE-2026-66322: Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perfor Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-66317P4MEDIUMCVSS 5.4fixed in 151.0.4129.592026-08-04
CVE-2026-66317 [MEDIUM] CWE-346 CVE-2026-66317: Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perfor Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network.
nvd
CVE-2026-66316P4MEDIUMCVSS 5.4fixed in 151.0.4129.592026-08-04
CVE-2026-66316 [MEDIUM] CWE-346 CVE-2026-66316: Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perfor Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-57978P4MEDIUMCVSS 5.4fixed in 150.0.4078.992026-07-26
CVE-2026-57978 [MEDIUM] CWE-346 CVE-2026-57978: Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perfor Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
← Previous11 / 15Next →
Microsoft Edge Chromium vulnerabilities | cvebase