Microsoft Edge Chromium vulnerabilities
290 known vulnerabilities affecting microsoft/edge_chromium.
Total CVEs
290
CISA KEV
9
actively exploited
Public exploits
10
Exploited in wild
9
Severity breakdown
CRITICAL14HIGH141MEDIUM127LOW8
Vulnerabilities
Page 8 of 15
CVE-2023-36887P3HIGHCVSS 7.8fixed in 114.0.1823.822023-07-14
CVE-2023-36887 [HIGH] CWE-843 CVE-2023-36887: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2024-38218P3HIGHCVSS 7.8fixed in 127.0.2651.982024-08-12
CVE-2024-38218 [HIGH] CWE-843 CVE-2024-38218: Microsoft Edge (HTML-based) Memory Corruption Vulnerability
Microsoft Edge (HTML-based) Memory Corruption Vulnerability
nvd
CVE-2022-21970P3HIGHCVSS 7.8fixed in 97.0.1072.552022-01-11
CVE-2022-21970 [HIGH] CWE-269 CVE-2022-21970: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2021-36928P3HIGHCVSS 7.8fixed in 92.0.902.552021-08-26
CVE-2021-36928 [HIGH] CWE-59 CVE-2021-36928: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2022-35796P3HIGHCVSS 7.5fixed in 104.0.1293.472022-08-09
CVE-2022-35796 [HIGH] CWE-362 CVE-2022-35796: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2022-38012P3HIGHCVSS 7.7v105.0.1343.252022-09-13
CVE-2022-38012 [HIGH] CVE-2022-38012: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2023-36014P3HIGHCVSS 7.3fixed in 119.0.2151.582023-11-10
CVE-2023-36014 [HIGH] CWE-94 CVE-2023-36014: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2021-21126P3MEDIUMCVSS 6.5fixed in 88.0.705.502021-02-09
CVE-2021-21126 [MEDIUM] CWE-20 CVE-2021-21126: Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remot
Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension.
nvd
CVE-2023-33143P3HIGHCVSS 7.5fixed in 114.0.1823.372023-06-03
CVE-2023-33143 [HIGH] CVE-2023-33143: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2022-29144P3HIGHCVSS 7.5fixed in 100.0.1185.442023-06-29
CVE-2022-29144 [HIGH] CVE-2022-29144: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2021-21131P3MEDIUMCVSS 6.5fixed in 88.0.705.502021-02-09
CVE-2021-21131 [MEDIUM] CWE-59 CVE-2021-21131: Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a
Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.
nvd
CVE-2026-66324P3MEDIUMCVSS 6.5fixed in 152.0.4191.532026-08-28
CVE-2026-66324 [MEDIUM] CWE-73 CVE-2026-66324: External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized atta
External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2024-26192P3HIGHCVSS 8.2fixed in 122.0.2365.522024-02-23
CVE-2024-26192 [HIGH] CWE-359 CVE-2024-26192: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2021-36931P3HIGHCVSS 7.8fixed in 92.0.902.552021-08-26
CVE-2021-36931 [HIGH] CWE-269 CVE-2021-36931: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2021-42308P3HIGHCVSS 7.5fixed in 96.0.1054.292021-11-24
CVE-2021-42308 [HIGH] CWE-290 CVE-2021-42308: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2026-56646P3MEDIUMCVSS 6.5fixed in 150.0.4078.482026-07-03
CVE-2026-56646 [MEDIUM] CWE-200 CVE-2026-56646: Exposure of sensitive information to an unauthorized actor in Microsoft Edge (Chromium-based) allows
Exposure of sensitive information to an unauthorized actor in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-57987P3MEDIUMCVSS 6.5fixed in 150.0.4078.482026-07-03
CVE-2026-57987 [MEDIUM] CWE-918 CVE-2026-57987: Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacke
Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2022-23263P3HIGHCVSS 7.7fixed in 98.0.1108.432022-02-07
CVE-2022-23263 [HIGH] CVE-2022-23263: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2026-58297P3HIGHCVSS 7.1fixed in 150.0.4078.482026-07-03
CVE-2026-58297 [HIGH] CWE-359 CVE-2026-58297: Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allo
Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-58296P3HIGHCVSS 7.1fixed in 150.0.4078.482026-07-03
CVE-2026-58296 [HIGH] CWE-359 CVE-2026-58296: Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allo
Exposure of private personal information to an unauthorized actor in Microsoft Edge for Android allows an unauthorized attacker to disclose information over a network.
nvd