Microsoft Edge Chromium vulnerabilities
258 known vulnerabilities affecting microsoft/edge_chromium.
Total CVEs
258
CISA KEV
9
actively exploited
Public exploits
9
Exploited in wild
9
Severity breakdown
CRITICAL13HIGH128MEDIUM110LOW7
Vulnerabilities
Page 7 of 13
CVE-2021-31937P3HIGHCVSS 8.2fixed in 91.0.864.372023-06-28
CVE-2021-31937 [HIGH] CWE-269 CVE-2021-31937: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2023-36034P3HIGHCVSS 7.3fixed in 118.0.2088.88fixed in 119.0.2151.442023-11-03
CVE-2023-36034 [HIGH] CWE-416 CVE-2023-36034: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2023-36887P3HIGHCVSS 7.8fixed in 114.0.1823.822023-07-14
CVE-2023-36887 [HIGH] CWE-843 CVE-2023-36887: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2024-38210P3HIGHCVSS 7.8fixed in 128.0.2739.422024-08-22
CVE-2024-38210 [HIGH] CWE-125 CVE-2024-38210: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2024-38209P3HIGHCVSS 7.8fixed in 128.0.2739.422024-08-22
CVE-2024-38209 [HIGH] CWE-843 CVE-2024-38209: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2026-57988P3HIGHCVSS 7.1fixed in 150.0.4078.482026-07-03
CVE-2026-57988 [HIGH] CWE-23 CVE-2026-57988: Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execut
Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2021-21123P3MEDIUMCVSS 6.5fixed in 88.0.705.502021-02-09
CVE-2021-21123 [MEDIUM] CWE-20 CVE-2021-21123: Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a rem
Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
nvd
CVE-2024-38218P3HIGHCVSS 7.8fixed in 127.0.2651.982024-08-12
CVE-2024-38218 [HIGH] CWE-843 CVE-2024-38218: Microsoft Edge (HTML-based) Memory Corruption Vulnerability
Microsoft Edge (HTML-based) Memory Corruption Vulnerability
nvd
CVE-2022-21970P3HIGHCVSS 7.8fixed in 97.0.1072.552022-01-11
CVE-2022-21970 [HIGH] CWE-269 CVE-2022-21970: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2021-36928P3HIGHCVSS 7.8fixed in 92.0.902.552021-08-26
CVE-2021-36928 [HIGH] CWE-59 CVE-2021-36928: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2022-38012P3HIGHCVSS 7.7v105.0.1343.252022-09-13
CVE-2022-38012 [HIGH] CVE-2022-38012: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2022-35796P3HIGHCVSS 7.5fixed in 104.0.1293.472022-08-09
CVE-2022-35796 [HIGH] CWE-362 CVE-2022-35796: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2022-29144P3HIGHCVSS 7.5fixed in 100.0.1185.442023-06-29
CVE-2022-29144 [HIGH] CVE-2022-29144: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2023-36014P3HIGHCVSS 7.3fixed in 119.0.2151.582023-11-10
CVE-2023-36014 [HIGH] CWE-94 CVE-2023-36014: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2021-21126P3MEDIUMCVSS 6.5fixed in 88.0.705.502021-02-09
CVE-2021-21126 [MEDIUM] CWE-20 CVE-2021-21126: Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remot
Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension.
nvd
CVE-2023-33143P3HIGHCVSS 7.5fixed in 114.0.1823.372023-06-03
CVE-2023-33143 [HIGH] CVE-2023-33143: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2021-21131P3MEDIUMCVSS 6.5fixed in 88.0.705.502021-02-09
CVE-2021-21131 [MEDIUM] CWE-59 CVE-2021-21131: Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a
Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
nvd
CVE-2024-26192P3HIGHCVSS 8.2fixed in 122.0.2365.522024-02-23
CVE-2024-26192 [HIGH] CWE-359 CVE-2024-26192: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2021-36931P3HIGHCVSS 7.8fixed in 92.0.902.552021-08-26
CVE-2021-36931 [HIGH] CWE-269 CVE-2021-36931: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2026-56646P3MEDIUMCVSS 6.5fixed in 150.0.4078.482026-07-03
CVE-2026-56646 [MEDIUM] CWE-200 CVE-2026-56646: Exposure of sensitive information to an unauthorized actor in Microsoft Edge (Chromium-based) allows
Exposure of sensitive information to an unauthorized actor in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd