Microsoft Edge Chromium vulnerabilities

290 known vulnerabilities affecting microsoft/edge_chromium.

Total CVEs

290

CISA KEV

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL14HIGH141MEDIUM127LOW8

Vulnerabilities

SortPage 12 of 15

CVE-2026-66798P4MEDIUMCVSS 4.3fixed in 152.0.4191.532026-08-28

CVE-2026-66798 [MEDIUM] CWE-416 CVE-2026-66798: Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

nvd

CVE-2023-29345P4MEDIUMCVSS 6.1fixed in 114.0.1823.372023-06-07

CVE-2023-29345 [MEDIUM] CWE-79 CVE-2023-29345: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

nvd

CVE-2026-45494P4MEDIUMCVSS 6.1fixed in 148.0.3967.702026-05-18

CVE-2026-45494 [MEDIUM] CWE-79 CVE-2026-45494: Microsoft Edge (Chromium-based) Spoofing Vulnerability Microsoft Edge (Chromium-based) Spoofing Vulnerability

nvd

CVE-2023-28261P4MEDIUMCVSS 5.7fixed in 110.0.1587.78fixed in 111.0.1661.542023-04-27

CVE-2023-28261 [MEDIUM] CWE-269 CVE-2023-28261: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

nvd

CVE-2022-23261P4MEDIUMCVSS 5.3fixed in 98.0.1108.432022-02-07

CVE-2022-23261 [MEDIUM] CVE-2022-23261: Microsoft Edge (Chromium-based) Tampering Vulnerability Microsoft Edge (Chromium-based) Tampering Vulnerability

nvd

CVE-2025-47182P4MEDIUMCVSS 5.6fixed in 138.0.3351.552025-07-11

CVE-2025-47182 [MEDIUM] CWE-20 CVE-2025-47182: Improper input validation in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass Improper input validation in Microsoft Edge (Chromium-based) allows an authorized attacker to bypass a security feature locally.

nvd

CVE-2025-26643P4MEDIUMCVSS 5.4fixed in 134.0.3124.512025-03-07

CVE-2025-26643 [MEDIUM] CWE-449 CVE-2025-26643: The UI performs the wrong action in Microsoft Edge (Chromium-based) allows an unauthorized attacker The UI performs the wrong action in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

nvd

CVE-2026-58522P4MEDIUMCVSS 5.5fixed in 150.0.4078.482026-07-03

CVE-2026-58522 [MEDIUM] CWE-23 CVE-2026-58522: Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose in Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.

nvd

CVE-2023-28286P4MEDIUMCVSS 6.1fixed in 110.0.1587.78fixed in 111.0.1661.542023-04-27

CVE-2023-28286 [MEDIUM] CWE-693 CVE-2023-28286: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

nvd

CVE-2024-30056P4MEDIUMCVSS 5.4fixed in 124.0.2478.1092024-05-25

CVE-2024-30056 [MEDIUM] CWE-359 CVE-2024-30056: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

nvd

CVE-2022-41035P4MEDIUMCVSS 5.3fixed in 106.0.1370.342022-10-11

CVE-2022-41035 [MEDIUM] CWE-362 CVE-2022-41035: Microsoft Edge (Chromium-based) Spoofing Vulnerability Microsoft Edge (Chromium-based) Spoofing Vulnerability

nvd

CVE-2021-34475P4MEDIUMCVSS 5.4fixed in 91.0.864.592023-07-01

CVE-2021-34475 [MEDIUM] CVE-2021-34475: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

nvd

CVE-2021-36929P4MEDIUMCVSS 5.5fixed in 92.0.902.552021-08-26

CVE-2021-36929 [MEDIUM] CVE-2021-36929: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

nvd

CVE-2023-36727P4MEDIUMCVSS 6.1fixed in 117.0.2045.312023-09-15

CVE-2023-36727 [MEDIUM] CVE-2023-36727: Microsoft Edge (Chromium-based) Spoofing Vulnerability Microsoft Edge (Chromium-based) Spoofing Vulnerability

nvd

CVE-2023-24935P4MEDIUMCVSS 6.1fixed in 112.0.5615.492023-04-11

CVE-2023-24935 [MEDIUM] CWE-601 CVE-2023-24935: Microsoft Edge (Chromium-based) Spoofing Vulnerability Microsoft Edge (Chromium-based) Spoofing Vulnerability

nvd

CVE-2023-44323P4MEDIUMCVSS 5.5fixed in 118.0.2088.762023-10-30

CVE-2023-44323 [MEDIUM] CWE-416 CVE-2023-44323: Adobe Acrobat for Edge version 118.0.2088.46 (and earlier) is affected by a Use After Free vulnerabi Adobe Acrobat for Edge version 118.0.2088.46 (and earlier) is affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.

nvd

CVE-2024-26163P4MEDIUMCVSS 4.7fixed in 122.0.2365.922024-03-14

CVE-2024-26163 [MEDIUM] CWE-693 CVE-2024-26163: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

nvd

CVE-2024-29991P4MEDIUMCVSS 5.0fixed in 124.0.2478.512024-04-19

CVE-2024-29991 [MEDIUM] CWE-94 CVE-2024-29991: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

nvd

CVE-2026-0385P4MEDIUMCVSS 5.0fixed in 146.0.3856.592026-03-16

CVE-2026-0385 [MEDIUM] CWE-451 CVE-2026-0385: Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability

nvd

CVE-2025-53791P4MEDIUMCVSS 4.7fixed in 140.0.3485.542025-09-05

CVE-2025-53791 [MEDIUM] CWE-284 CVE-2025-53791: Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

nvd

← Previous12 / 15Next →