cbcvebase.

Microsoft Edge Chromium vulnerabilities

290 known vulnerabilities affecting microsoft/edge_chromium.

Total CVEs
290
CISA KEV
9
actively exploited
Public exploits
10
Exploited in wild
9
Severity breakdown
CRITICAL14HIGH141MEDIUM127LOW8

Vulnerabilities

Page 4 of 15
CVE-2026-58288P3HIGHCVSS 8.3fixed in 150.0.4078.482026-07-03
CVE-2026-58288 [HIGH] CWE-416 CVE-2026-58288: Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-43587P3HIGHCVSS 8.1fixed in 130.0.2849.462024-10-17
CVE-2024-43587 [HIGH] CWE-122 CVE-2024-43587: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2022-22021P3HIGHCVSS 8.3fixed in 102.0.1245.392022-06-15
CVE-2022-22021 [HIGH] CVE-2022-22021: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2021-21125P3HIGHCVSS 8.1fixed in 88.0.705.502021-02-09
CVE-2021-21125 [HIGH] CWE-59 CVE-2021-21125: Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
nvd
CVE-2022-33649P3CRITICALCVSS 9.6fixed in 104.0.1293.472022-08-09
CVE-2022-33649 [CRITICAL] CVE-2022-33649: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
nvd
CVE-2024-21326P3CRITICALCVSS 9.6fixed in 121.0.2277.832024-01-26
CVE-2024-21326 [CRITICAL] CWE-416 CVE-2024-21326: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2023-36787P3HIGHCVSS 8.8fixed in 116.0.1938.542023-08-21
CVE-2023-36787 [HIGH] CWE-416 CVE-2023-36787: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2024-43579P3HIGHCVSS 8.3fixed in 130.0.2849.462024-10-17
CVE-2024-43579 [HIGH] CWE-122 CVE-2024-43579: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2024-43578P3HIGHCVSS 8.3fixed in 130.0.2849.462024-10-17
CVE-2024-43578 [HIGH] CWE-122 CVE-2024-43578: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2026-66315P3HIGHCVSS 7.5fixed in 151.0.4129.592026-08-04
CVE-2026-66315 [HIGH] CWE-416 CVE-2026-66315: Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-57984P3HIGHCVSS 7.5fixed in 150.0.4078.482026-07-03
CVE-2026-57984 [HIGH] CWE-416 CVE-2026-57984: Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-57992P3HIGHCVSS 7.5fixed in 150.0.4078.482026-07-03
CVE-2026-57992 [HIGH] CWE-416 CVE-2026-57992: Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-57986P3HIGHCVSS 7.5fixed in 150.0.4078.482026-07-03
CVE-2026-57986 [HIGH] CWE-416 CVE-2026-57986: Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-58293P3HIGHCVSS 7.5fixed in 150.0.4078.482026-07-03
CVE-2026-58293 [HIGH] CWE-73 CVE-2026-58293: External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized atta External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-58276P3HIGHCVSS 7.5fixed in 150.0.4078.482026-07-03
CVE-2026-58276 [HIGH] CWE-416 CVE-2026-58276: Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-58294P3HIGHCVSS 7.5fixed in 150.0.4078.482026-07-03
CVE-2026-58294 [HIGH] CWE-416 CVE-2026-58294: Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2024-21399P3HIGHCVSS 8.3fixed in 121.0.2277.982024-02-02
CVE-2024-21399 [HIGH] CWE-416 CVE-2024-21399: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2026-58596P3HIGHCVSS 8.3fixed in 150.0.4078.482026-07-12
CVE-2026-58596 [HIGH] CWE-822 CVE-2026-58596: Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
nvd
CVE-2026-58525P3HIGHCVSS 8.2fixed in 150.0.4078.502026-07-08
CVE-2026-58525 [HIGH] CWE-284 CVE-2026-58525: Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass Improper access control in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2021-30614P3HIGHCVSS 8.8≤ 93.0.4577.632021-09-03
CVE-2021-30614 [HIGH] CWE-787 CVE-2021-30614: Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip
nvd
Microsoft Edge Chromium vulnerabilities | cvebase