Microsoft Edge vulnerabilities
349 known vulnerabilities affecting microsoft/microsoft_edge.
Total CVEs
349
CISA KEV
2
actively exploited
Public exploits
8
Exploited in wild
2
Severity breakdown
CRITICAL9HIGH168MEDIUM164LOW8
Vulnerabilities
Page 11 of 18
CVE-2026-57980P4MEDIUMCVSS 5.4≥ 1.0.0.0, < 150.0.4078.802026-07-17
CVE-2026-57980 [MEDIUM] CWE-288 CVE-2026-57980: Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows a
Authentication bypass using an alternate path or channel in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering over a network.
nvd
CVE-2026-57977P4HIGHCVSS 7.1≥ 1.0.0.0, < 150.0.4078.482026-07-03
CVE-2026-57977 [HIGH] CWE-79 CVE-2026-57977: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Ed
Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2023-36022P4MEDIUMCVSS 6.6≥ 1.0.0, < 119.0.2151.442023-11-03
CVE-2023-36022 [MEDIUM] CWE-94 CVE-2023-36022: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2022-23262P4MEDIUMCVSS 6.3≥ 1.0.0, < 98.0.1108.432022-02-07
CVE-2022-23262 [MEDIUM] CVE-2022-23262: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2023-36027P4MEDIUMCVSS 6.3≥ 1.0.0, < 119.0.2151.582023-11-10
CVE-2023-36027 [MEDIUM] CVE-2023-36027: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2026-45489P4MEDIUMCVSS 6.5≥ 1.0.0.0, < 150.0.4078.482026-07-03
CVE-2026-45489 [MEDIUM] CWE-749 CVE-2026-45489: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2019-0764P4MEDIUMCVSS 6.5vWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+15 more2019-04-09
CVE-2019-0764 [MEDIUM] CWE-88 CVE-2019-0764: A tampering vulnerability exists when Microsoft browsers do not properly validate input under specif
A tampering vulnerability exists when Microsoft browsers do not properly validate input under specific conditions, aka 'Microsoft Browsers Tampering Vulnerability'.
nvd
CVE-2026-45492P4MEDIUMCVSS 5.4≥ 1.0.0.0, < 148.0.3967.702026-05-18
CVE-2026-45492 [MEDIUM] CWE-20 CVE-2026-45492: Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypa
Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2019-0641P4MEDIUMCVSS 5.9vWindows 10 Version 1703 for 32-bit SystemsvWindows 10 Version 1703 for x64-based Systems+10 more2019-03-05
CVE-2019-0641 [MEDIUM] CVE-2019-0641: A security feature bypass vulnerability exists in Microsoft Edge handles whitelisting, aka 'Microsof
A security feature bypass vulnerability exists in Microsoft Edge handles whitelisting, aka 'Microsoft Edge Security Feature Bypass Vulnerability'.
nvd
CVE-2023-36409P4MEDIUMCVSS 6.5≥ 1.0.0, < 118.0.2088.462023-11-07
CVE-2023-36409 [MEDIUM] CVE-2023-36409: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2023-36008P4MEDIUMCVSS 6.6≥ 1.0.0, < 119.0.2151.722023-11-16
CVE-2023-36008 [MEDIUM] CWE-416 CVE-2023-36008: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2024-20675P4MEDIUMCVSS 6.3≥ 1.0.0, < 120.0.2210.1332024-01-11
CVE-2024-20675 [MEDIUM] CWE-284 CVE-2024-20675: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
nvd
CVE-2024-38207P4MEDIUMCVSS 6.3≥ 1.0.0, < 128.0.2739.422024-08-23
CVE-2024-38207 [MEDIUM] CWE-843 CVE-2024-38207: Microsoft Edge (HTML-based) Memory Corruption Vulnerability
Microsoft Edge (HTML-based) Memory Corruption Vulnerability
nvd
CVE-2018-8278P4MEDIUMCVSS 6.1vWindows 10 Version 1803 for 32-bit SystemsvWindows 10 Version 1803 for x64-based Systems2018-07-11
CVE-2018-8278 [MEDIUM] CWE-290 CVE-2018-8278: A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "M
A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge.
nvd
CVE-2026-58278P4MEDIUMCVSS 5.4≥ 1.0.0.0, < 150.0.4078.482026-07-03
CVE-2026-58278 [MEDIUM] CWE-918 CVE-2026-58278: Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacke
Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2024-49023P4MEDIUMCVSS 5.3≥ 1.0.0, < 130.0.2849.462024-10-18
CVE-2024-49023 [MEDIUM] CWE-416 CVE-2024-49023: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2026-42838P4MEDIUMCVSS 5.4≥ 1.0.0.0, < 148.0.3967.552026-05-12
CVE-2026-42838 [MEDIUM] CWE-74 CVE-2026-42838: Improper neutralization of special elements in output used by a downstream component ('injection') i
Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
nvd
CVE-2024-29987P4MEDIUMCVSS 6.5≥ 1.0.0, < 124.0.2478.512024-04-18
CVE-2024-29987 [MEDIUM] CWE-359 CVE-2024-29987: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2024-38222P4MEDIUMCVSS 6.5≥ 1.0.0, < 128.0.2739.422024-09-12
CVE-2024-38222 [MEDIUM] CWE-276 CVE-2024-38222: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2020-1195P4MEDIUMCVSS 5.9vunspecified2020-05-21
CVE-2020-1195 [MEDIUM] CWE-20 CVE-2020-1195: An elevation of privilege vulnerability exists in Microsoft Edge (Chromium-based) when the Feedback
An elevation of privilege vulnerability exists in Microsoft Edge (Chromium-based) when the Feedback extension improperly validates input, aka 'Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability'.
nvd