Microsoft Edge vulnerabilities
349 known vulnerabilities affecting microsoft/microsoft_edge.
Total CVEs
349
CISA KEV
2
actively exploited
Public exploits
8
Exploited in wild
2
Severity breakdown
CRITICAL9HIGH168MEDIUM164LOW8
Vulnerabilities
Page 17 of 18
CVE-2024-38221P4MEDIUMCVSS 4.3≥ 1.0.0, < 129.0.2792.522024-09-19
CVE-2024-38221 [MEDIUM] CWE-79 CVE-2024-38221: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2024-43577P4MEDIUMCVSS 4.3≥ 1.0.0, < 130.0.2849.462024-10-18
CVE-2024-43577 [MEDIUM] CWE-449 CVE-2024-43577: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2025-47964P4MEDIUMCVSS 4.3≥ 1.0.0.0, < 138.0.3351.552025-07-11
CVE-2025-47964 [MEDIUM] CWE-451 CVE-2025-47964: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2026-32187P4MEDIUMCVSS 4.2≥ 1.0.0.0, < 146.0.3856.842026-03-27
CVE-2026-32187 [MEDIUM] CWE-1021 CVE-2026-32187: Microsoft Edge (Chromium-based) Defense in Depth Vulnerability
Microsoft Edge (Chromium-based) Defense in Depth Vulnerability
cvelistv5nvd
CVE-2022-44688P4MEDIUMCVSS 4.3≥ 1.0.0.0, < 108.0.1462.422022-12-13
CVE-2022-44688 [MEDIUM] CVE-2022-44688: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2023-21794P4MEDIUMCVSS 4.3≥ 1.0.0, < 110.0.1587.412023-02-14
CVE-2023-21794 [MEDIUM] CWE-290 CVE-2023-21794: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2023-36559P4MEDIUMCVSS 4.2≥ 1.0.0, < 118.0.2088.462023-10-13
CVE-2023-36559 [MEDIUM] CVE-2023-36559: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2021-42307P4MEDIUMCVSS 4.3≥ 1.0.0, < 95.0.1020.302023-07-01
CVE-2021-42307 [MEDIUM] CVE-2021-42307: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2024-21382P4MEDIUMCVSS 4.3≥ 1.0.0, < 121.0.2277.832024-01-26
CVE-2024-21382 [MEDIUM] CWE-942 CVE-2024-21382: Microsoft Edge for Android Information Disclosure Vulnerability
Microsoft Edge for Android Information Disclosure Vulnerability
nvd
CVE-2025-21267P4MEDIUMCVSS 4.4≥ 1.0.0.0, < 133.0.3065.512025-02-06
CVE-2025-21267 [MEDIUM] CWE-358 CVE-2025-21267: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2024-49025P4MEDIUMCVSS 4.3≥ 1.0.0, < 131.0.2903.482024-11-14
CVE-2024-49025 [MEDIUM] CWE-359 CVE-2024-49025: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2022-21929P4LOWCVSS 2.5≥ 1.0.0, < 97.0.1072.552022-01-11
CVE-2022-21929 [LOW] CVE-2022-21929: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2018-8366P4LOWCVSS 3.1vWindows 10 Version 1803 for 32-bit SystemsvWindows 10 Version 1803 for x64-based Systems2018-09-13
CVE-2018-8366 [LOW] CWE-200 CVE-2018-8366: An information disclosure vulnerability exists when the Microsoft Edge Fetch API incorrectly handles
An information disclosure vulnerability exists when the Microsoft Edge Fetch API incorrectly handles a filtered response type, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge.
nvd
CVE-2018-8370P4LOWCVSS 3.1vWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+9 more2018-08-15
CVE-2018-8370 [LOW] CWE-200 CVE-2018-8370: A information disclosure vulnerability exists when WebAudio Library improperly handles audio request
A information disclosure vulnerability exists when WebAudio Library improperly handles audio requests, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge.
nvd
CVE-2026-0102P4LOWCVSS 3.1≥ 1.0.0.0, < 145.0.3800.582026-02-17
CVE-2026-0102 [LOW] CWE-359 CVE-2026-0102: Under specific conditions, a malicious webpage may trigger autofill population after two consecutive
Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses, email, or phone number metadata.
nvd
CVE-2023-38158P4LOWCVSS 3.1≥ 1.0.0, < 116.0.1938.542023-08-21
CVE-2023-38158 [LOW] CWE-200 CVE-2023-38158: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2024-21383P4LOWCVSS 3.3≥ 1.0.0, < 121.0.2277.832024-01-26
CVE-2024-21383 [LOW] CWE-347 CVE-2024-21383: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2022-29147P4LOWCVSS 3.1≥ 1.0.0, < 101.0.1210.322023-06-29
CVE-2022-29147 [LOW] CVE-2022-29147: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2024-21336P4LOWCVSS 2.5≥ 1.0.0, < 121.0.2277.832024-01-26
CVE-2024-21336 [LOW] CWE-357 CVE-2024-21336: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2020-17058HIGHCVSS 7.5≥ 1.0..0, < publication2020-11-11
CVE-2020-17058 [HIGH] Microsoft Browser Memory Corruption Vulnerability
Microsoft Browser Memory Corruption Vulnerability
Microsoft Browser Memory Corruption Vulnerability
cvelistv5