Microsoft Edge vulnerabilities
382 known vulnerabilities affecting microsoft/microsoft_edge.
Total CVEs
382
CISA KEV
2
actively exploited
Public exploits
9
Exploited in wild
2
Severity breakdown
CRITICAL10HIGH184MEDIUM179LOW9
Vulnerabilities
Page 19 of 20
CVE-2021-42307P4MEDIUMCVSS 4.3≥ 1.0.0, < 95.0.1020.302023-07-01
CVE-2021-42307 [MEDIUM] CVE-2021-42307: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2024-21382P4MEDIUMCVSS 4.3≥ 1.0.0, < 121.0.2277.832024-01-26
CVE-2024-21382 [MEDIUM] CWE-942 CVE-2024-21382: Microsoft Edge for Android Information Disclosure Vulnerability
Microsoft Edge for Android Information Disclosure Vulnerability
nvd
CVE-2025-21267P4MEDIUMCVSS 4.4≥ 1.0.0.0, < 133.0.3065.512025-02-06
CVE-2025-21267 [MEDIUM] CWE-358 CVE-2025-21267: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2022-21929P4LOWCVSS 2.5≥ 1.0.0, < 97.0.1072.552022-01-11
CVE-2022-21929 [LOW] CVE-2022-21929: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2018-8366P4LOWCVSS 3.1vWindows 10 Version 1803 for 32-bit SystemsvWindows 10 Version 1803 for x64-based Systems2018-09-13
CVE-2018-8366 [LOW] CWE-200 CVE-2018-8366: An information disclosure vulnerability exists when the Microsoft Edge Fetch API incorrectly handles
An information disclosure vulnerability exists when the Microsoft Edge Fetch API incorrectly handles a filtered response type, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge.
nvd
CVE-2026-0102P4LOWCVSS 3.1≥ 1.0.0.0, < 145.0.3800.582026-02-17
CVE-2026-0102 [LOW] CWE-359 CVE-2026-0102: Under specific conditions, a malicious webpage may trigger autofill population after two consecutive
Under specific conditions, a malicious webpage may trigger autofill population after two consecutive taps, potentially without clear or intentional user consent. This could result in disclosure of stored autofill data such as addresses, email, or phone number metadata.
nvd
CVE-2018-8370P4LOWCVSS 3.1vWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+9 more2018-08-15
CVE-2018-8370 [LOW] CWE-200 CVE-2018-8370: A information disclosure vulnerability exists when WebAudio Library improperly handles audio request
A information disclosure vulnerability exists when WebAudio Library improperly handles audio requests, aka "Microsoft Edge Information Disclosure Vulnerability." This affects Microsoft Edge.
nvd
CVE-2026-58616P4LOWCVSS 3.0v-2026-08-28
CVE-2026-58616 [LOW] CWE-362 CVE-2026-58616: Concurrent execution using shared resource with improper synchronization ('race condition') in Copil
Concurrent execution using shared resource with improper synchronization ('race condition') in Copilot Chat (Microsoft Edge) allows an authorized attacker to disclose information over a network.
nvd
CVE-2023-38158P4LOWCVSS 3.1≥ 1.0.0.0, < 116.0.1938.542023-08-21
CVE-2023-38158 [LOW] CWE-200 CVE-2023-38158: Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
nvd
CVE-2024-21383P4LOWCVSS 3.3≥ 1.0.0, < 121.0.2277.832024-01-26
CVE-2024-21383 [LOW] CWE-347 CVE-2024-21383: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2022-29147P4LOWCVSS 3.1≥ 1.0.0, < 101.0.1210.322023-06-29
CVE-2022-29147 [LOW] CVE-2022-29147: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2024-21336P4LOWCVSS 2.5≥ 1.0.0, < 121.0.2277.832024-01-26
CVE-2024-21336 [LOW] CWE-357 CVE-2024-21336: Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
nvd
CVE-2020-17058HIGHCVSS 7.5≥ 1.0..0, < publication2020-11-11
CVE-2020-17058 [HIGH] Microsoft Browser Memory Corruption Vulnerability
Microsoft Browser Memory Corruption Vulnerability
Microsoft Browser Memory Corruption Vulnerability
cvelistv5
CVE-2020-17052HIGHCVSS 7.5≥ 1.0..0, < publication2020-11-11
CVE-2020-17052 [HIGH] Scripting Engine Memory Corruption Vulnerability
Scripting Engine Memory Corruption Vulnerability
Scripting Engine Memory Corruption Vulnerability
cvelistv5
CVE-2025-29825MEDIUMCVSS 6.5≥ 1.0.0.0, < 136.0.3240.502025-05-02
CVE-2025-29825 [MEDIUM] CWE-451 Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
User interface (ui) misrepresentation of critical information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
cvelistv5
CVE-2026-0391MEDIUMCVSS 6.5≥ 1.0.0.0, < 143.0.3650.662026-02-05
CVE-2026-0391 [MEDIUM] CWE-451 Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
User interface (ui) misrepresentation of critical information in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.
cvelistv5
CVE-2021-38642MEDIUMCVSS 6.1≥ 1.0.0, < 93.0.961.382021-09-02
CVE-2021-38642 [MEDIUM] Microsoft Edge for iOS Spoofing Vulnerability
Microsoft Edge for iOS Spoofing Vulnerability
Microsoft Edge for iOS Spoofing Vulnerability
cvelistv5
CVE-2021-38641MEDIUMCVSS 6.1≥ 1.0.0, < 93.0.961.382021-09-02
CVE-2021-38641 [MEDIUM] Microsoft Edge for Android Spoofing Vulnerability
Microsoft Edge for Android Spoofing Vulnerability
Microsoft Edge for Android Spoofing Vulnerability
cvelistv5
CVE-2024-21387MEDIUMCVSS 5.3≥ 1.0.0, < 121.0.2277.832024-01-26
CVE-2024-21387 [MEDIUM] CWE-357 Microsoft Edge for Android Spoofing Vulnerability
Microsoft Edge for Android Spoofing Vulnerability
Microsoft Edge for Android Spoofing Vulnerability
cvelistv5
CVE-2025-21262MEDIUMCVSS 5.4≥ 1.0.0.0, < 132.0.2957.1272025-01-24
CVE-2025-21262 [MEDIUM] CWE-451 Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
User Interface (UI) Misrepresentation of Critical Information in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network
cvelistv5