Microsoft Edge vulnerabilities
382 known vulnerabilities affecting microsoft/microsoft_edge.
Total CVEs
382
CISA KEV
2
actively exploited
Public exploits
9
Exploited in wild
2
Severity breakdown
CRITICAL10HIGH184MEDIUM179LOW9
Vulnerabilities
Page 6 of 20
CVE-2018-8377P3HIGHCVSS 7.5vWindows 10 Version 1803 for 32-bit SystemsvWindows 10 Version 1803 for x64-based Systems2018-08-15
CVE-2018-8377 [HIGH] CWE-787 CVE-2018-8377: A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memo
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka "Microsoft Edge Memory Corruption Vulnerability." This affects Microsoft Edge. This CVE ID is unique from CVE-2018-8387.
nvd
CVE-2022-33636P3HIGHCVSS 8.3≥ 1.0.0, < 104.0.1293.472022-08-09
CVE-2022-33636 [HIGH] CWE-362 CVE-2022-33636: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2019-0912P3HIGHCVSS 7.5vWindows 10 Version 1709 for 32-bit SystemsvWindows 10 Version 1709 for x64-based Systems+8 more2019-05-16
CVE-2019-0912 [HIGH] CWE-787 CVE-2019-0912: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles obj
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0913, CVE-2019-0914, CVE-2019-0915, CVE-2019-0916, CVE-2019-0917, CVE-2019-0922, CVE-2019-0923, CVE-2019-0924, CVE-2019-09
nvd
CVE-2023-21775P3HIGHCVSS 8.3≥ 1.0.0, < 109.0.1518.492023-01-24
CVE-2023-21775 [HIGH] CVE-2023-21775: Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
nvd
CVE-2019-0806P3HIGHCVSS 7.5vWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+15 more2019-04-09
CVE-2019-0806 [HIGH] CWE-787 CVE-2019-0806: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles obj
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-0810, CVE-2019-0812, CVE-2019-0829, CVE-2019-0860, CVE-2019-0861.
nvd
CVE-2019-1062P3HIGHCVSS 7.5vWindows 10 for 32-bit SystemsvWindows 10 for x64-based Systems+15 more2019-07-15
CVE-2019-1062 [HIGH] CWE-787 CVE-2019-1062: A remote code execution vulnerability exists in the way that the Chakra scripting engine handles obj
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1092, CVE-2019-1103, CVE-2019-1106, CVE-2019-1107.
nvd
CVE-2019-0926P3HIGHCVSS 7.5vWindows 10 Version 1809 for 32-bit SystemsvWindows 10 Version 1809 for x64-based Systems+2 more2019-05-16
CVE-2019-0926 [HIGH] CWE-787 CVE-2019-0926: A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memo
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'.
nvd
CVE-2019-0779P3HIGHCVSS 7.5vWindows Server 2016vWindows 10 Version 1607 for 32-bit Systems+6 more2019-04-09
CVE-2019-0779 [HIGH] CWE-787 CVE-2019-0779: A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memo
A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruption Vulnerability'.
nvd
CVE-2026-66318P3HIGHCVSS 8.1≥ 1.0.0.0, < 151.0.4129.592026-08-04
CVE-2026-66318 [HIGH] CWE-346 CVE-2026-66318: Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclo
Origin validation error in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.
nvd
CVE-2021-30618P3HIGHCVSS 8.8vunspecified2021-09-03
CVE-2021-30618 [HIGH] CVE-2021-30618: Chromium: CVE-2021-30618 Inappropriate implementation in DevTools
Chromium: CVE-2021-30618 Inappropriate implementation in DevTools
nvd
CVE-2021-30613P3HIGHCVSS 8.8vunspecified2021-09-03
CVE-2021-30613 [HIGH] CWE-416 CVE-2021-30613: Chromium: CVE-2021-30613 Use after free in Base internals
Chromium: CVE-2021-30613 Use after free in Base internals
nvd
CVE-2021-30608P3HIGHCVSS 8.8vunspecified2021-09-03
CVE-2021-30608 [HIGH] CWE-416 CVE-2021-30608: Chromium: CVE-2021-30608 Use after free in Web Share
Chromium: CVE-2021-30608 Use after free in Web Share
nvd
CVE-2025-29815P3HIGHCVSS 7.6≥ 1.0.0.0, < 134.0.3124.662025-04-04
CVE-2025-29815 [HIGH] CWE-416 CVE-2025-29815: Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over
Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to execute code over a network.
nvd
CVE-2026-88097P3HIGHCVSS 7.8≥ 1.0.0.0, < 153.0.4234.462026-09-18
CVE-2026-88097 [HIGH] CWE-416 CVE-2026-88097: Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privile
Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges locally.
nvd
CVE-2026-58299P3HIGHCVSS 7.5≥ 1.0.0.0, < 150.0.4078.482026-07-03
CVE-2026-58299 [HIGH] CWE-367 CVE-2026-58299: Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthoriz
Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthorized attacker to execute code over a network.
nvd
CVE-2026-58290P3HIGHCVSS 7.5≥ 1.0.0.0, < 150.0.4078.482026-07-03
CVE-2026-58290 [HIGH] CWE-843 CVE-2026-58290: Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) all
Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
nvd
CVE-2019-0988P3HIGHCVSS 7.5≥ 1.0..0, < publication2019-06-12
CVE-2019-0988 [HIGH] CWE-787 CVE-2019-0988: A remote code execution vulnerability exists in the way the scripting engine handles objects in memo
A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability could gain the same user rights as th
nvd
CVE-2022-30192P3HIGHCVSS 8.3≥ 1.0.0, < 103.0.1264.372022-06-29
CVE-2022-30192 [HIGH] CVE-2022-30192: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2022-33639P3HIGHCVSS 8.3≥ 1.0.0, < 103.0.1264.372022-06-29
CVE-2022-33639 [HIGH] CVE-2022-33639: Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
nvd
CVE-2021-31982P3HIGHCVSS 8.8≥ 1.0.0, < 91.0.864.372023-07-01
CVE-2021-31982 [HIGH] CWE-693 CVE-2021-31982: Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
nvd