Microsoft Edge Chromium vulnerabilities
290 known vulnerabilities affecting microsoft/edge_chromium.
Total CVEs
290
CISA KEV
9
actively exploited
Public exploits
10
Exploited in wild
9
Severity breakdown
CRITICAL14HIGH141MEDIUM127LOW8
Vulnerabilities
Page 7 of 15
CVE-2026-85892P3HIGHCVSS 7.8fixed in 152.0.4191.662026-09-14
CVE-2026-85892 [HIGH] CWE-362 CVE-2026-85892: Concurrent execution using shared resource with improper synchronization ('race condition') in Micro
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges locally.
nvd
CVE-2026-65802P3HIGHCVSS 7.4fixed in 151.0.4129.592026-08-04
CVE-2026-65802 [HIGH] CWE-73 CVE-2026-65802: External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker
External control of file name or path in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2024-21385P3HIGHCVSS 8.3fixed in 121.0.2277.832024-01-26
CVE-2024-21385 [HIGH] CWE-416 CVE-2024-21385: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2023-29350P3HIGHCVSS 7.5fixed in 113.0.1774.352023-05-05
CVE-2023-29350 [HIGH] CWE-269 CVE-2023-29350: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2023-36741P3HIGHCVSS 7.5fixed in 116.0.1938.622023-08-26
CVE-2023-36741 [HIGH] CWE-416 CVE-2023-36741: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2025-29834P3HIGHCVSS 7.5fixed in 134.0.3124.932025-04-12
CVE-2025-29834 [HIGH] CWE-125 CVE-2025-29834: Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute cod
Out-of-bounds read in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-57993P3HIGHCVSS 7.4fixed in 150.0.4078.482026-07-03
CVE-2026-57993 [HIGH] CWE-918 CVE-2026-57993: Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacke
Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-41107P3HIGHCVSS 7.4fixed in 148.0.3967.552026-05-12
CVE-2026-41107 [HIGH] CWE-73 CVE-2026-41107: External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized atta
External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2022-29146P3HIGHCVSS 8.3fixed in 101.0.1210.322023-06-29
CVE-2022-29146 [HIGH] CVE-2022-29146: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2023-21796P3HIGHCVSS 8.3fixed in 108.0.1462.952023-01-24
CVE-2023-21796 [HIGH] CVE-2023-21796: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2023-21795P3HIGHCVSS 8.3fixed in 109.0.1518.702023-01-24
CVE-2023-21795 [HIGH] CWE-416 CVE-2023-21795: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2021-33741P3HIGHCVSS 7.5fixed in 91.0.864.412021-06-08
CVE-2021-33741 [HIGH] CVE-2021-33741: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2024-43472P3HIGHCVSS 8.3fixed in 127.0.2651.1052024-08-16
CVE-2024-43472 [HIGH] CWE-416 CVE-2024-43472: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2023-36034P3HIGHCVSS 7.3fixed in 118.0.2088.88fixed in 119.0.2151.442023-11-03
CVE-2023-36034 [HIGH] CWE-416 CVE-2023-36034: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2024-38210P3HIGHCVSS 7.8fixed in 128.0.2739.422024-08-22
CVE-2024-38210 [HIGH] CWE-125 CVE-2024-38210: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2024-38209P3HIGHCVSS 7.8fixed in 128.0.2739.422024-08-22
CVE-2024-38209 [HIGH] CWE-843 CVE-2024-38209: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2026-57989P3HIGHCVSS 7.4fixed in 150.0.4078.992026-07-26
CVE-2026-57989 [HIGH] CWE-346 CVE-2026-57989: Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclo
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-57988P3HIGHCVSS 7.1fixed in 150.0.4078.482026-07-03
CVE-2026-57988 [HIGH] CWE-23 CVE-2026-57988: Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execut
Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2021-31937P3HIGHCVSS 8.2fixed in 91.0.864.372023-06-28
CVE-2021-31937 [HIGH] CWE-269 CVE-2021-31937: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2021-21123P3MEDIUMCVSS 6.5fixed in 88.0.705.502021-02-09
CVE-2021-21123 [MEDIUM] CWE-20 CVE-2021-21123: Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a rem
Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
nvd