Microsoft Edge vulnerabilities
382 known vulnerabilities affecting microsoft/microsoft_edge.
Total CVEs
382
CISA KEV
2
actively exploited
Public exploits
9
Exploited in wild
2
Severity breakdown
CRITICAL10HIGH184MEDIUM179LOW9
Vulnerabilities
Page 12 of 20
CVE-2025-47963P4MEDIUMCVSS 6.5≥ 1.0.0.0, < 138.0.3351.552025-07-11
CVE-2025-47963 [MEDIUM] CWE-451 CVE-2025-47963: No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform
No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-58291P4MEDIUMCVSS 6.1≥ 1.0.0.0, < 150.0.4078.482026-07-03
CVE-2026-58291 [MEDIUM] CWE-672 CVE-2026-58291: Operation on a resource after expiration or release in Microsoft Edge (Chromium-based) allows an una
Operation on a resource after expiration or release in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2026-65804P4MEDIUMCVSS 6.1≥ 1.0.0.0, < 151.0.4129.592026-08-04
CVE-2026-65804 [MEDIUM] CWE-94 CVE-2026-65804: Improper control of generation of code ('code injection') in Microsoft Edge (Chromium-based) allows
Improper control of generation of code ('code injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2019-0764P4MEDIUMCVSS 6.5vWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+15 more2019-04-09
CVE-2019-0764 [MEDIUM] CWE-88 CVE-2019-0764: A tampering vulnerability exists when Microsoft browsers do not properly validate input under specif
A tampering vulnerability exists when Microsoft browsers do not properly validate input under specific conditions, aka 'Microsoft Browsers Tampering Vulnerability'.
nvd
CVE-2023-36022P4MEDIUMCVSS 6.6≥ 1.0.0, < 119.0.2151.442023-11-03
CVE-2023-36022 [MEDIUM] CWE-94 CVE-2023-36022: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2022-23262P4MEDIUMCVSS 6.3≥ 1.0.0, < 98.0.1108.432022-02-07
CVE-2022-23262 [MEDIUM] CVE-2022-23262: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2023-36027P4MEDIUMCVSS 6.3≥ 1.0.0, < 119.0.2151.582023-11-10
CVE-2023-36027 [MEDIUM] CVE-2023-36027: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2026-66311P4MEDIUMCVSS 6.2≥ 1.0.0.0, < 151.0.4129.592026-08-04
CVE-2026-66311 [MEDIUM] CWE-862 CVE-2026-66311: Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform
Missing authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform tampering locally.
nvd
CVE-2026-66325P4MEDIUMCVSS 6.1≥ 1.0.0.0, < 151.0.4129.592026-08-04
CVE-2026-66325 [MEDIUM] CWE-918 CVE-2026-66325: Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacke
Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-70339P4MEDIUMCVSS 5.4≥ 1.0.0.0, < 151.0.4129.782026-08-11
CVE-2026-70339 [MEDIUM] CWE-843 CVE-2026-70339: Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) all
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-45492P4MEDIUMCVSS 5.4≥ 1.0.0.0, < 148.0.3967.702026-05-18
CVE-2026-45492 [MEDIUM] CWE-20 CVE-2026-45492: Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypa
Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypass a security feature over a network.
nvd
CVE-2019-0641P4MEDIUMCVSS 5.9vWindows 10 Version 1703 for 32-bit SystemsvWindows 10 Version 1703 for x64-based Systems+10 more2019-03-05
CVE-2019-0641 [MEDIUM] CVE-2019-0641: A security feature bypass vulnerability exists in Microsoft Edge handles whitelisting, aka 'Microsof
A security feature bypass vulnerability exists in Microsoft Edge handles whitelisting, aka 'Microsoft Edge Security Feature Bypass Vulnerability'.
nvd
CVE-2023-36008P4MEDIUMCVSS 6.6≥ 1.0.0, < 119.0.2151.722023-11-16
CVE-2023-36008 [MEDIUM] CWE-416 CVE-2023-36008: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2018-8278P4MEDIUMCVSS 6.1vWindows 10 Version 1803 for 32-bit SystemsvWindows 10 Version 1803 for x64-based Systems2018-07-11
CVE-2018-8278 [MEDIUM] CWE-290 CVE-2018-8278: A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "M
A spoofing vulnerability exists when Microsoft Edge improperly handles specific HTML content, aka "Microsoft Edge Spoofing Vulnerability." This affects Microsoft Edge.
nvd
CVE-2024-20675P4MEDIUMCVSS 6.3≥ 1.0.0, < 120.0.2210.1332024-01-11
CVE-2024-20675 [MEDIUM] CWE-284 CVE-2024-20675: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
nvd
CVE-2026-58278P4MEDIUMCVSS 5.4≥ 1.0.0.0, < 150.0.4078.482026-07-03
CVE-2026-58278 [MEDIUM] CWE-918 CVE-2026-58278: Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacke
Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
nvd
CVE-2026-62904P4MEDIUMCVSS 5.4v-2026-08-28
CVE-2026-62904 [MEDIUM] CWE-863 CVE-2026-62904: Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclo
Incorrect authorization in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2024-49023P4MEDIUMCVSS 5.3≥ 1.0.0, < 130.0.2849.462024-10-18
CVE-2024-49023 [MEDIUM] CWE-416 CVE-2024-49023: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2026-42838P4MEDIUMCVSS 5.4≥ 1.0.0.0, < 148.0.3967.552026-05-12
CVE-2026-42838 [MEDIUM] CWE-74 CVE-2026-42838: Improper neutralization of special elements in output used by a downstream component ('injection') i
Improper neutralization of special elements in output used by a downstream component ('injection') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.
nvd
CVE-2024-29987P4MEDIUMCVSS 6.5≥ 1.0.0, < 124.0.2478.512024-04-18
CVE-2024-29987 [MEDIUM] CWE-359 CVE-2024-29987: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
nvd