Microsoft Edge Chromium vulnerabilities
290 known vulnerabilities affecting microsoft/edge_chromium.
Total CVEs
290
CISA KEV
9
actively exploited
Public exploits
10
Exploited in wild
9
Severity breakdown
CRITICAL14HIGH141MEDIUM127LOW8
Vulnerabilities
Page 13 of 15
CVE-2023-21720P4MEDIUMCVSS 5.3fixed in 109.0.15.18.782023-02-14
CVE-2023-21720 [MEDIUM] CWE-126 CVE-2023-21720: Microsoft Edge (Chromium-based) Tampering Vulnerability
Microsoft Edge (Chromium-based) Tampering Vulnerability
nvd
CVE-2024-30055P4MEDIUMCVSS 5.4fixed in 124.0.2478.972024-05-14
CVE-2024-30055 [MEDIUM] CWE-451 CVE-2024-30055: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2024-29986P4MEDIUMCVSS 5.4fixed in 124.0.2478.512024-04-18
CVE-2024-29986 [MEDIUM] CWE-359 CVE-2024-29986: Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2024-43580P4MEDIUMCVSS 5.4fixed in 130.0.2849.462024-10-17
CVE-2024-43580 [MEDIUM] CWE-357 CVE-2024-43580: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2024-30058P4MEDIUMCVSS 5.4fixed in 126.0.2592.562024-06-13
CVE-2024-30058 [MEDIUM] CWE-357 CVE-2024-30058: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2024-21337P4MEDIUMCVSS 5.2fixed in 120.0.2210.1332024-01-11
CVE-2024-21337 [MEDIUM] CWE-122 CVE-2024-21337: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2022-21931P4MEDIUMCVSS 4.2fixed in 97.0.1072.552022-01-11
CVE-2022-21931 [MEDIUM] CVE-2022-21931: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2022-21930P4MEDIUMCVSS 4.2fixed in 97.0.1072.552022-01-11
CVE-2022-21930 [MEDIUM] CVE-2022-21930: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2021-43221P4MEDIUMCVSS 4.2fixed in 96.0.1054.292021-11-24
CVE-2021-43221 [MEDIUM] CWE-94 CVE-2021-43221: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2026-58597P4MEDIUMCVSS 4.3fixed in 150.0.4078.482026-07-03
CVE-2026-58597 [MEDIUM] CWE-357 CVE-2026-58597: Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an unautho
Insufficient ui warning of dangerous operations in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2024-20721P4MEDIUMCVSS 5.5fixed in 120.0.2210.1332024-01-15
CVE-2024-20721 [MEDIUM] CWE-20 CVE-2024-20721: Acrobat Reader T5 (MSFT Edge) versions 120.0.2210.91 and earlier are affected by an Improper Input V
Acrobat Reader T5 (MSFT Edge) versions 120.0.2210.91 and earlier are affected by an Improper Input Validation vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a mal
nvd
CVE-2024-20709P4MEDIUMCVSS 5.5fixed in 120.0.2210.1332024-01-15
CVE-2024-20709 [MEDIUM] CWE-20 CVE-2024-20709: Acrobat Reader T5 (MSFT Edge) versions 120.0.2210.91 and earlier are affected by an Improper Input V
Acrobat Reader T5 (MSFT Edge) versions 120.0.2210.91 and earlier are affected by an Improper Input Validation vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a mal
nvd
CVE-2023-36880P4MEDIUMCVSS 4.8fixed in 120.0.2210.612023-12-07
CVE-2023-36880 [MEDIUM] CVE-2023-36880: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2023-29354P4MEDIUMCVSS 4.7fixed in 113.0.1774.352023-05-05
CVE-2023-29354 [MEDIUM] CWE-693 CVE-2023-29354: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
nvd
CVE-2026-33118P4MEDIUMCVSS 4.3fixed in 147.0.3912.602026-04-10
CVE-2026-33118 [MEDIUM] CWE-451 CVE-2026-33118: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2022-26905P4MEDIUMCVSS 4.3fixed in 102.0.5005.612022-06-01
CVE-2022-26905 [MEDIUM] CVE-2022-26905: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2024-21423P4MEDIUMCVSS 4.8fixed in 122.0.2365.522024-02-23
CVE-2024-21423 [MEDIUM] CWE-693 CVE-2024-21423: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2023-35392P4MEDIUMCVSS 4.7fixed in 115.0.1901.1832023-07-21
CVE-2023-35392 [MEDIUM] CWE-290 CVE-2023-35392: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2024-29049P4MEDIUMCVSS 4.7fixed in 122.0.2365.120≥ 123.0.2420.53, < 123.0.2420.812024-04-04
CVE-2024-29049 [MEDIUM] CWE-79 CVE-2024-29049: Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability
Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability
nvd
CVE-2023-38174P4MEDIUMCVSS 4.3fixed in 120.0.2210.612023-12-07
CVE-2023-38174 [MEDIUM] CVE-2023-38174: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
nvd