Microsoft Edge vulnerabilities

CVE-2020-0878 [HIGH] CWE-787 CVE-2020-0878: <p>A remote code execution vulnerability exists in the way that Microsoft browsers access objects in A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the current user.

CVE-2021-26411 [HIGH] Internet Explorer Memory Corruption Vulnerability Internet Explorer Memory Corruption Vulnerability Internet Explorer Memory Corruption Vulnerability

CVE-2019-0539 [HIGH] CWE-787 CVE-2019-0539: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles obj A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2019-0567, CVE-2019-0568.

CVE-2018-8353 [HIGH] CWE-416 CVE-2018-8353: A remote code execution vulnerability exists in the way that the scripting engine handles objects in A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer, aka "Scripting Engine Memory Corruption Vulnerability." This affects Internet Explorer 9, Internet Explorer 11, Internet Explorer 10. This CVE ID is unique from CVE-2018-8355, CVE-2018-8359, CVE-2018-8371, CVE-2018-8372, CVE-

CVE-2019-0566 [HIGH] CWE-862 CVE-2019-0566: An elevation of privilege vulnerability exists in Microsoft Edge Browser Broker COM object, aka "Mic An elevation of privilege vulnerability exists in Microsoft Edge Browser Broker COM object, aka "Microsoft Edge Elevation of Privilege Vulnerability." This affects Microsoft Edge.

CVE-2025-49741 [HIGH] CWE-268 CVE-2025-49741: No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

CVE-2018-8463 [HIGH] CVE-2018-8463: An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to esc An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka "Microsoft Edge Elevation of Privilege Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8469.

CVE-2023-24892 [HIGH] CWE-601 CVE-2023-24892: Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability

CVE-2023-33145 [MEDIUM] CVE-2023-33145: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

CVE-2026-45495 [CRITICAL] CWE-35 CVE-2026-45495: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVE-2026-57983 [CRITICAL] CWE-285 CVE-2026-57983: Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass Improper authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.

CVE-2019-0612 [MEDIUM] CVE-2019-0612: A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improper A security feature bypass vulnerability exists when Click2Play protection in Microsoft Edge improperly handles flash objects. By itself, this bypass vulnerability does not allow arbitrary code execution, aka 'Microsoft Edge Security Feature Bypass Vulnerability'.

CVE-2024-43566 [CRITICAL] CWE-190 CVE-2024-43566: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVE-2018-8464 [HIGH] CWE-119 CVE-2018-8464: An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles obje An remote code execution vulnerability exists when Microsoft Edge PDF Reader improperly handles objects in memory, aka "Microsoft Edge PDF Remote Code Execution Vulnerability." This affects Microsoft Edge.

CVE-2024-38219 [CRITICAL] CWE-843 CVE-2024-38219: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

CVE-2026-57985 [HIGH] CWE-20 CVE-2026-57985: Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to exec Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2026-50521 [HIGH] CWE-416 CVE-2026-50521: Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.

CVE-2026-57981 [HIGH] CWE-416 CVE-2026-57981: Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

CVE-2024-21388 [MEDIUM] CWE-20 CVE-2024-21388: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

CVE-2019-0940 [HIGH] CWE-787 CVE-2019-0940: A remote code execution vulnerability exists in the way that Microsoft browsers access objects in me A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka 'Microsoft Browser Memory Corruption Vulnerability'.