Microsoft Edge vulnerabilities

349 known vulnerabilities affecting microsoft/microsoft_edge.

Total CVEs

349

CISA KEV

actively exploited

Public exploits

Exploited in wild

Severity breakdown

CRITICAL9HIGH168MEDIUM164LOW8

Vulnerabilities

SortPage 4 of 18

CVE-2026-57992P3HIGHCVSS 7.5≥ 1.0.0.0, < 150.0.4078.482026-07-03

CVE-2026-57992 [HIGH] CWE-416 CVE-2026-57992: Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

nvd

CVE-2018-8403P3HIGHCVSS 7.5vWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+5 more2018-08-15

CVE-2018-8403 [HIGH] CWE-787 CVE-2018-8403: A remote code execution vulnerability exists in the way that Microsoft browsers access objects in me A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory, aka "Microsoft Browser Memory Corruption Vulnerability." This affects Internet Explorer 11, Microsoft Edge, Internet Explorer 10.

nvd

CVE-2020-1057P3HIGHCVSS 8.1≥ 1.0..0, < publication2020-09-11

CVE-2020-1057 [HIGH] CWE-787 CVE-2020-1057: <p>A remote code execution vulnerability exists in the way that the ChakraCore scripting engine hand A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as the curr

nvd

CVE-2018-0945P3HIGHCVSS 7.5vWindows 10 Version 1803 for 32-bit SystemsvWindows 10 Version 1803 for x64-based Systems2018-05-09

CVE-2018-0945 [HIGH] CWE-787 CVE-2018-0945: A remote code execution vulnerability exists in the way that the scripting engine handles objects in A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-0946, CVE-2018-0951, CVE-2018-0953, CVE-2018-0954, CVE-2018-0955, CVE-2018-1022, CVE-2018-8114,

nvd

CVE-2024-21399P3HIGHCVSS 8.3≥ 1.0.0, < 121.0.2277.982024-02-02

CVE-2024-21399 [HIGH] CWE-416 CVE-2024-21399: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

nvd

CVE-2018-8110P3HIGHCVSS 7.5vWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+9 more2018-06-14

CVE-2018-8110 [HIGH] CWE-787 CVE-2018-8110: A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memo A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8111, CVE-2018-8236.

nvd

CVE-2018-8367P3HIGHCVSS 7.5vWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+9 more2018-09-13

CVE-2018-8367 [HIGH] CWE-787 CVE-2018-8367: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles obj A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8465, CVE-2018-8466, CVE-2018-8467.

nvd

CVE-2018-8473P3HIGHCVSS 7.5vWindows 10 Version 1709 for 32-bit SystemsvWindows 10 Version 1709 for x64-based Systems+2 more2018-10-10

CVE-2018-8473 [HIGH] CWE-787 CVE-2018-8473: A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memo A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8509.

nvd

CVE-2018-8503P3HIGHCVSS 7.5vWindows 10 Version 1809 for 32-bit SystemsvWindows 10 Version 1809 for ARM64-based Systems+2 more2018-10-10

CVE-2018-8503 [HIGH] CWE-787 CVE-2018-8503: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles obj A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8505, CVE-2018-8510, CVE-2018-8511, CVE-2018-8513.

nvd

CVE-2018-8354P3HIGHCVSS 7.5vWindows 10 Version 1803 for 32-bit SystemsvWindows 10 Version 1803 for x64-based Systems2018-09-13

CVE-2018-8354 [HIGH] CWE-787 CVE-2018-8354: A remote code execution vulnerability exists in the way that the scripting engine handles objects in A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge, aka "Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8391, CVE-2018-8456, CVE-2018-8457, CVE-2018-8459.

nvd

CVE-2026-58596P3HIGHCVSS 8.3≥ 1.0.0.0, < 150.0.4078.482026-07-12

CVE-2026-58596 [HIGH] CWE-822 CVE-2026-58596: Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to Untrusted pointer dereference in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

nvd

CVE-2018-8541P3HIGHCVSS 7.5vWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+15 more2018-11-14

CVE-2018-8541 [HIGH] CWE-787 CVE-2018-8541: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles obj A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8542, CVE-2018-8543, CVE-2018-8551, CVE-2018-8555, CVE-2018-8556, CVE-2018-8557,

nvd

CVE-2018-8179P3HIGHCVSS 7.5vWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+9 more2018-05-09

CVE-2018-8179 [HIGH] CWE-787 CVE-2018-8179: A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memo A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge.

nvd

CVE-2021-30614P3HIGHCVSS 8.8vunspecified2021-09-03

CVE-2021-30614 [HIGH] CWE-787 CVE-2021-30614: Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip Chromium: CVE-2021-30614 Heap buffer overflow in TabStrip

nvd

CVE-2019-0938P3CRITICALCVSS 9.0vWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+15 more2019-05-16

CVE-2019-0938 [CRITICAL] CVE-2019-0938: An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to esc An elevation of privilege vulnerability exists in Microsoft Edge that could allow an attacker to escape from the AppContainer sandbox in the browser, aka 'Microsoft Edge Elevation of Privilege Vulnerability'.

nvd

CVE-2026-57975P3HIGHCVSS 7.5≥ 1.0.0.0, < 150.0.4078.482026-07-03

CVE-2026-57975 [HIGH] CWE-843 CVE-2026-57975: Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) all Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

nvd

CVE-2026-58293P3HIGHCVSS 7.5≥ 1.0.0.0, < 150.0.4078.482026-07-03

CVE-2026-58293 [HIGH] CWE-73 CVE-2026-58293: External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized atta External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

nvd

CVE-2026-57984P3HIGHCVSS 7.5≥ 1.0.0.0, < 150.0.4078.482026-07-03

CVE-2026-57984 [HIGH] CWE-416 CVE-2026-57984: Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

nvd

CVE-2026-57986P3HIGHCVSS 7.5≥ 1.0.0.0, < 150.0.4078.482026-07-03

CVE-2026-57986 [HIGH] CWE-416 CVE-2026-57986: Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

nvd

CVE-2026-58276P3HIGHCVSS 7.5≥ 1.0.0.0, < 150.0.4078.482026-07-03

CVE-2026-58276 [HIGH] CWE-416 CVE-2026-58276: Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code ov Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

nvd

← Previous4 / 18Next →