Microsoft Edge Chromium vulnerabilities
210 known vulnerabilities affecting microsoft/edge_chromium.
Total CVEs
210
CISA KEV
9
actively exploited
Public exploits
3
Exploited in wild
7
Severity breakdown
CRITICAL12HIGH98MEDIUM93LOW7
Vulnerabilities
Page 4 of 11
CVE-2024-29986MEDIUMCVSS 5.4fixed in 124.0.2478.512024-04-18
CVE-2024-29986 [MEDIUM] CWE-359 CVE-2024-29986: Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2024-29049MEDIUMCVSS 4.7fixed in 122.0.2365.120≥ 123.0.2420.53, < 123.0.2420.812024-04-04
CVE-2024-29049 [MEDIUM] CWE-79 CVE-2024-29049: Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability
Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability
nvd
CVE-2024-29981MEDIUMCVSS 4.3fixed in 122.0.2365.120≥ 123.0.2420.53, < 123.0.2420.812024-04-04
CVE-2024-29981 [MEDIUM] CWE-1021 CVE-2024-29981: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2024-26163MEDIUMCVSS 4.7fixed in 122.0.2365.922024-03-14
CVE-2024-26163 [MEDIUM] CWE-693 CVE-2024-26163: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
nvd
CVE-2024-26192HIGHCVSS 8.2fixed in 122.0.2365.522024-02-23
CVE-2024-26192 [HIGH] CWE-359 CVE-2024-26192: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2024-21423MEDIUMCVSS 4.8fixed in 122.0.2365.522024-02-23
CVE-2024-21423 [MEDIUM] CWE-693 CVE-2024-21423: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2024-21399HIGHCVSS 8.3fixed in 121.0.2277.982024-02-02
CVE-2024-21399 [HIGH] CWE-416 CVE-2024-21399: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2024-21388MEDIUMCVSS 6.5fixed in 121.0.2277.832024-01-30
CVE-2024-21388 [MEDIUM] CWE-20 CVE-2024-21388: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2024-21326CRITICALCVSS 9.6fixed in 121.0.2277.832024-01-26
CVE-2024-21326 [CRITICAL] CWE-416 CVE-2024-21326: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2024-21385HIGHCVSS 8.3fixed in 121.0.2277.832024-01-26
CVE-2024-21385 [HIGH] CWE-416 CVE-2024-21385: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2024-21382MEDIUMCVSS 4.3fixed in 121.0.2277.832024-01-26
CVE-2024-21382 [MEDIUM] CWE-942 CVE-2024-21382: Microsoft Edge for Android Information Disclosure Vulnerability
Microsoft Edge for Android Information Disclosure Vulnerability
nvd
CVE-2024-21383LOWCVSS 3.3fixed in 121.0.2277.832024-01-26
CVE-2024-21383 [LOW] CWE-347 CVE-2024-21383: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2024-21336LOWCVSS 2.5fixed in 121.0.2277.832024-01-26
CVE-2024-21336 [LOW] CWE-357 CVE-2024-21336: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2024-20721MEDIUMCVSS 5.5fixed in 120.0.2210.1332024-01-15
CVE-2024-20721 [MEDIUM] CWE-20 CVE-2024-20721: Acrobat Reader T5 (MSFT Edge) versions 120.0.2210.91 and earlier are affected by an Improper Input V
Acrobat Reader T5 (MSFT Edge) versions 120.0.2210.91 and earlier are affected by an Improper Input Validation vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a mal
nvd
CVE-2024-20709MEDIUMCVSS 5.5fixed in 120.0.2210.1332024-01-15
CVE-2024-20709 [MEDIUM] CWE-20 CVE-2024-20709: Acrobat Reader T5 (MSFT Edge) versions 120.0.2210.91 and earlier are affected by an Improper Input V
Acrobat Reader T5 (MSFT Edge) versions 120.0.2210.91 and earlier are affected by an Improper Input Validation vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a mal
nvd
CVE-2024-21337MEDIUMCVSS 5.2fixed in 120.0.2210.1332024-01-11
CVE-2024-21337 [MEDIUM] CWE-122 CVE-2024-21337: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2024-20675MEDIUMCVSS 6.3fixed in 120.0.2210.1332024-01-11
CVE-2024-20675 [MEDIUM] CWE-284 CVE-2024-20675: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
nvd
CVE-2023-36878MEDIUMCVSS 4.3fixed in 120.0.2210.772023-12-15
CVE-2023-36878 [MEDIUM] CVE-2023-36878: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
nvd
CVE-2023-6702HIGHCVSS 8.8fixed in 120.0.2210.772023-12-14
CVE-2023-6702 [HIGH] CWE-843 CVE-2023-6702: Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potential
Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
nvd
CVE-2023-35618CRITICALCVSS 9.6fixed in 120.0.2210.612023-12-07
CVE-2023-35618 [CRITICAL] CWE-416 CVE-2023-35618: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd