Microsoft Edge Chromium vulnerabilities
258 known vulnerabilities affecting microsoft/edge_chromium.
Total CVEs
258
CISA KEV
9
actively exploited
Public exploits
9
Exploited in wild
9
Severity breakdown
CRITICAL13HIGH128MEDIUM110LOW7
Vulnerabilities
Page 9 of 13
CVE-2021-21137P4MEDIUMCVSS 6.5fixed in 88.0.705.502021-02-09
CVE-2021-21137 [MEDIUM] CWE-74 CVE-2021-21137: Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote att
Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.
nvd
CVE-2021-30615P3MEDIUMCVSS 6.5≤ 93.0.4577.632021-09-03
CVE-2021-30615 [MEDIUM] CVE-2021-30615: Chromium: CVE-2021-30615 Cross-origin data leak in Navigation
Chromium: CVE-2021-30615 Cross-origin data leak in Navigation
nvd
CVE-2026-58291P4MEDIUMCVSS 6.1fixed in 150.0.4078.482026-07-03
CVE-2026-58291 [MEDIUM] CWE-672 CVE-2026-58291: Operation on a resource after expiration or release in Microsoft Edge (Chromium-based) allows an una
Operation on a resource after expiration or release in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2021-21136P3MEDIUMCVSS 6.5fixed in 88.0.705.502021-02-09
CVE-2021-21136 [MEDIUM] CWE-346 CVE-2021-21136: Insufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96 allowed
Insufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.
nvd
CVE-2023-36024P4HIGHCVSS 7.1fixed in 118.0.2088.102fixed in 119.0.2151.582023-11-10
CVE-2023-36024 [HIGH] CWE-269 CVE-2023-36024: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2023-36562P4HIGHCVSS 7.1fixed in 117.0.2045.312023-09-15
CVE-2023-36562 [HIGH] CWE-416 CVE-2023-36562: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2023-21719P3MEDIUMCVSS 6.5fixed in 109.0.1518.702023-01-24
CVE-2023-21719 [MEDIUM] CWE-863 CVE-2023-21719: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
nvd
CVE-2025-21185P4MEDIUMCVSS 6.5fixed in 132.0.2957.1152025-01-17
CVE-2025-21185 [MEDIUM] CWE-284 CVE-2025-21185: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2025-47963P3MEDIUMCVSS 6.5fixed in 138.0.3351.552025-07-11
CVE-2025-47963 [MEDIUM] CWE-451 CVE-2025-47963: No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform
No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-57980P4MEDIUMCVSS 5.4fixed in 150.0.4078.802026-07-17
CVE-2026-57980 [MEDIUM] CWE-288 CVE-2026-57980: Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows a
Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network.
nvd
CVE-2026-57977P4HIGHCVSS 7.1fixed in 150.0.4078.482026-07-03
CVE-2026-57977 [HIGH] CWE-79 CVE-2026-57977: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ed
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2023-36022P4MEDIUMCVSS 6.6fixed in 118.0.2088.88fixed in 119.0.2151.442023-11-03
CVE-2023-36022 [MEDIUM] CWE-94 CVE-2023-36022: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2022-23262P4MEDIUMCVSS 6.3fixed in 98.0.1108.432022-02-07
CVE-2022-23262 [MEDIUM] CVE-2022-23262: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2023-36027P4MEDIUMCVSS 6.3fixed in 118.0.2088.102fixed in 119.0.2151.582023-11-10
CVE-2023-36027 [MEDIUM] CVE-2023-36027: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2026-45489P4MEDIUMCVSS 6.5fixed in 150.0.4078.482026-07-03
CVE-2026-45489 [MEDIUM] CWE-749 CVE-2026-45489: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2026-45492P4MEDIUMCVSS 5.4fixed in 148.0.3967.702026-05-18
CVE-2026-45492 [MEDIUM] CWE-20 CVE-2026-45492: Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypa
Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2023-36409P4MEDIUMCVSS 6.5fixed in 118.0.2088.462023-11-07
CVE-2023-36409 [MEDIUM] CVE-2023-36409: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2023-36008P4MEDIUMCVSS 6.6fixed in 119.0.2151.722023-11-16
CVE-2023-36008 [MEDIUM] CWE-416 CVE-2023-36008: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2024-20675P4MEDIUMCVSS 6.3fixed in 120.0.2210.1332024-01-11
CVE-2024-20675 [MEDIUM] CWE-284 CVE-2024-20675: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
nvd
CVE-2024-38207P4MEDIUMCVSS 6.3fixed in 128.0.2739.422024-08-23
CVE-2024-38207 [MEDIUM] CWE-843 CVE-2024-38207: Microsoft Edge (HTML-based) Memory Corruption Vulnerability
Microsoft Edge (HTML-based) Memory Corruption Vulnerability
nvd