Microsoft Edge Chromium vulnerabilities
258 known vulnerabilities affecting microsoft/edge_chromium.
Total CVEs
258
CISA KEV
9
actively exploited
Public exploits
9
Exploited in wild
9
Severity breakdown
CRITICAL13HIGH128MEDIUM110LOW7
Vulnerabilities
Page 12 of 13
CVE-2021-43221P4MEDIUMCVSS 4.2fixed in 96.0.1054.292021-11-24
CVE-2021-43221 [MEDIUM] CWE-94 CVE-2021-43221: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2026-58597P4MEDIUMCVSS 4.3fixed in 150.0.4078.482026-07-03
CVE-2026-58597 [MEDIUM] CWE-357 CVE-2026-58597: Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an unautho
Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2023-36880P4MEDIUMCVSS 4.8fixed in 120.0.2210.612023-12-07
CVE-2023-36880 [MEDIUM] CVE-2023-36880: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2026-33118P4MEDIUMCVSS 4.3fixed in 147.0.3912.602026-04-10
CVE-2026-33118 [MEDIUM] CWE-451 CVE-2026-33118: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2024-21423P4MEDIUMCVSS 4.8fixed in 122.0.2365.522024-02-23
CVE-2024-21423 [MEDIUM] CWE-693 CVE-2024-21423: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2023-35392P4MEDIUMCVSS 4.7fixed in 115.0.1901.1832023-07-21
CVE-2023-35392 [MEDIUM] CWE-290 CVE-2023-35392: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2022-26905P4MEDIUMCVSS 4.3fixed in 102.0.5005.612022-06-01
CVE-2022-26905 [MEDIUM] CVE-2022-26905: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2022-23264P4MEDIUMCVSS 4.7fixed in 98.0.1108.502023-06-29
CVE-2022-23264 [MEDIUM] CVE-2022-23264: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2024-29049P4MEDIUMCVSS 4.7fixed in 122.0.2365.120≥ 123.0.2420.53, < 123.0.2420.812024-04-04
CVE-2024-29049 [MEDIUM] CWE-79 CVE-2024-29049: Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability
Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability
nvd
CVE-2023-38174P4MEDIUMCVSS 4.3fixed in 120.0.2210.612023-12-07
CVE-2023-38174 [MEDIUM] CVE-2023-38174: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2023-36878P4MEDIUMCVSS 4.3fixed in 120.0.2210.772023-12-15
CVE-2023-36878 [MEDIUM] CVE-2023-36878: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
nvd
CVE-2026-55945P4MEDIUMCVSS 4.2fixed in 150.0.4078.482026-07-03
CVE-2026-55945 [MEDIUM] CWE-362 CVE-2026-55945: Concurrent execution using shared resource with improper synchronization ('race condition') in Micro
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to disclose information locally.
nvd
CVE-2022-24523P4MEDIUMCVSS 4.3fixed in 100.0.1185.292022-04-05
CVE-2022-24523 [MEDIUM] CVE-2022-24523: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2023-29334P4MEDIUMCVSS 4.3fixed in 112.0.1722.482023-04-28
CVE-2023-29334 [MEDIUM] CWE-290 CVE-2023-29334: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2024-49041P4MEDIUMCVSS 4.3fixed in 131.0.2903.862024-12-06
CVE-2024-49041 [MEDIUM] CWE-449 CVE-2024-49041: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2025-21404P4MEDIUMCVSS 4.3fixed in 133.0.3065.512025-02-06
CVE-2025-21404 [MEDIUM] CWE-449 CVE-2025-21404: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2025-21401P4MEDIUMCVSS 4.5fixed in 133.0.3065.692025-02-15
CVE-2025-21401 [MEDIUM] CWE-601 CVE-2025-21401: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
nvd
CVE-2023-36026P4MEDIUMCVSS 4.3fixed in 119.0.2151.722023-11-16
CVE-2023-36026 [MEDIUM] CVE-2023-36026: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2024-29981P4MEDIUMCVSS 4.3fixed in 122.0.2365.120≥ 123.0.2420.53, < 123.0.2420.812024-04-04
CVE-2024-29981 [MEDIUM] CWE-1021 CVE-2024-29981: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2024-49054P4MEDIUMCVSS 4.3fixed in 131.0.2903.632024-11-22
CVE-2024-49054 [MEDIUM] CWE-357 CVE-2024-49054: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd